Your Name
Cloud Architect — Landing Zones, Hybrid Networking, and Cloud Migration
City, ST · (555) 010-0205 · you@email.com · linkedin.com/in/yourname
Professional Summary
Cloud architect with ten years in infrastructure, the last five designing AWS and Azure platforms for enterprise and public-sector clients. Designs multi-account landing zones, hub-and-spoke networking, identity federation, and security guardrails, and sets the Terraform module standards engineering teams deploy with. Leads migration assessments, runs architecture reviews, and explains trade-offs in cost, risk, and resilience to technical and business stakeholders.
Skills
Cloud solution architecture · Landing zone design · Hub-and-spoke and hybrid networking · Identity and access management (IAM, Entra ID) · Security architecture and guardrails · High availability and disaster recovery · Terraform and infrastructure as code · Kubernetes (EKS, AKS) · Cloud migration strategy · FinOps and cost optimization
Experience
Lead Cloud Architect
2022 – Present
IT consultancy, cloud practice · City, ST
- Designed a multi-account AWS landing zone for a healthcare client with separate security, logging, shared-services, and workload accounts, enforced through service control policies.
- Led a discovery of 180 applications, classifying each against the 7 Rs and producing a wave plan that application owners and the client’s CIO signed off.
- Defined hub-and-spoke networking with Transit Gateway and redundant Direct Connect links, replacing a mesh of site-to-site VPNs.
- Chaired the weekly architecture review board and recorded 40+ architecture decision records covering data residency, encryption, and DR tiers.
- Introduced tagging standards and monthly cost reviews with finance, reducing idle and oversized compute spend by 22% in two quarters.
Senior Cloud Infrastructure Engineer
2018 – 2022
Regional insurance company · City, ST
- Built the company’s first Azure subscription hierarchy with management groups, Azure Policy, and role-based access control aligned to Entra ID groups.
- Wrote reusable Terraform modules for networking, AKS clusters, and databases, cutting new environment setup from weeks to under a day.
- Designed a warm-standby DR pattern in a paired region for the claims platform and ran the first successful failover test.
- Worked with the security team to centralise logging in Microsoft Sentinel and close audit findings on privileged access.
Certifications
- AWS Certified Solutions Architect – Professional — list only if held
- Current Microsoft Azure architect certification — use the exact credential name the provider shows; list only if held
Education
- Bachelor of Science in Computer Science — University Name, City, ST