Cloud Architecture Engineer - Vice President

iCapital•New York, NY

2h•$150,000 - $190,000•Hybrid

About The Position

The Cloud Architecture Engineer will provide big-picture architectural direction while performing hands-on technical work across AWS, Kubernetes, and web infrastructure. The role focuses on building and improving core compute, network, and edge infrastructure, scaling the iCapital platform through an automation-first approach, and helping application and platform teams onboard services, establish connectivity, troubleshoot traffic flows, and maintain consistent networking patterns across environments. The position is designated Vice President in the posting. The engineer will work as a senior individual contributor, influencing multiple teams and partnering with engineering, security, and product colleagues to establish practical, well-understood platform standards. The role is office-based Monday through Thursday, with flexibility to work remotely on Friday.

Requirements

At least 8 years of experience in platform, cloud, or infrastructure engineering roles, with demonstrated architectural responsibility.
Strong hands-on experience designing and operating Kubernetes platforms in production, including understanding autoscaling strategies, node provisioning, and security on EKS.
Deep understanding of AWS infrastructure, including networking, security primitives, and managed services.
Expertise in cloud networking architecture patterns, including VPC design, routing, and planning for scale.
Strong understanding of ingress/egress, Transit Gateway design, and private connectivity.
Ability to operate as a senior individual contributor and influence multiple teams as a leader.
Very strong written and verbal communication skills, including the ability to explain architectural decisions to technical and nontechnical audiences.

Nice To Haves

Deep expertise in Kong or other API gateways.
Experience directly managing Akamai in a production environment.
Strong understanding of application design principles.
Some experience with EKS standards such as Bottlerocket, Karpenter, or Auto-mode.
Software engineering background; some experience with Python is expected.
AWS or Kubernetes certifications are a plus but are not required.

Responsibilities

Design and continually improve Kubernetes architecture and help operationally manage cluster lifecycle.
Work on projects integrating new self-hosted and SaaS services, including collaborating with developers on software architecture where needed.
Manage Transit Gateway, Network Firewall, and external connectivity.
Provide architectural guidance for edge and traffic management, including CDN, DNS, and TLS strategies such as Akamai and Cloudflare.
Produce and maintain reference architectures, design documents, and architectural guardrails.
Partner with engineering, security, and product teams to ensure platform standards are practical, understood, and broadly adopted.
Help application and platform teams onboard services, establish connectivity, troubleshoot traffic flows, and maintain consistent networking patterns across environments.