Cloud Architect

Job summary

This is a backfill for a team member who moved to another team. You'll support existing cloud workloads, handle tickets from app teams and take on migration projects. The operations team manages landing zones, networking and identity for every application team in the company. Remote, open to candidates across Sri Lanka. Few meetings, lots of written updates. Please make sure you have a quiet place to work and a solid internet connection.

Job duties

• Analyse monthly cloud bills and recommend Savings Plans, reservations or rightsizing.
• Design VPCs and VNets, subnets, routing, VPN and Direct Connect or ExpressRoute links.
• Automate routine tasks with Python, PowerShell or Lambda functions.
• Manage IAM roles, policies and Azure RBAC with least-privilege access.
• Configure backups, snapshots and disaster recovery for cloud resources.
• Keep architecture diagrams and runbooks current.
• Apply security controls and fix findings from AWS Security Hub, Defender for Cloud or Wiz.

What you'll need

• 8-10 years of hands-on cloud infrastructure experience.
• Understanding of identity integration with Entra ID (Azure AD) or Okta.
• Infrastructure as code using Terraform, Bicep or CloudFormation.
• Windows and Linux server administration experience.
• Ability to explain cloud costs and tradeoffs to non-technical managers.
• Scripting in Python, PowerShell or Bash.

Bonus points

• AWS Solutions Architect Associate or Azure Administrator (AZ-104) certification.
• Background in a regulated industry such as healthcare or finance.

What we offer

Salary range: LKR 340,000 - LKR 390,000 a month

• Paid leave.
• Internet allowance.
• Learning budget.

The company

Small enough that you will talk to clients directly in your first week. Clients are mostly credit unions, medical groups and municipal governments in Western Province.

Candidates must be eligible to work in Sri Lanka.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ochrestead Labs.