Cloud Architect

How we work ?

Ofelia Perks & Benefits

About the role

We are building our cloud offering to a full SaaS model, and building a new Architecture team to lead that shift.

You'll partner closely with our Head of Architecture on the software-and-cloud vision, and work day to day with the Cloud/DevOps and Platform teams. You'll have real ownership over how we build, secure, and scale the platform as it grows from where it is today toward a multi-tenant, multi-customer product.

How we work - Architecture built together

This role comes with real autonomy, on purpose. Our Head of Architecture will be closely involved at the start, introducing you to the teams and setting direction, and will then step back to let you drive your own scope. We're not looking for someone to manage closely; we're looking for someone who can take a blank page and own it, and who knows when to loop others in.

The Architecture team itself is still taking shape, so a lot of how we work will be built together with you. In practice, that means direct, frequent exchanges with the teams below rather than layers of process, closer to mentorship and architecture review than top-down direction:

• Head of Architecture (hiring manager) : software & AI architecture, partnering for a unified product vision

• Cloud/DevOps team : daily collaboration and mentoring

• Platform team : cross-cutting architecture topics

• Information Security Officer : validating cloud security choices

The day-to-day job

Day to day, you'll own the cloud side of that transition end to end:

• Design and evolve the platform's multi-tenant cloud architecture (tenant isolation, data models, onboarding flows), robust, scalable, and secure, with AWS as the primary provider and a second cloud provider

• Define and promote architecture best practices: high availability, resilience, cost optimization (FinOps)

• Lead containerization and orchestration with Kubernetes (cluster design, networking, security, observability, lifecycle management)

• Industrialize provisioning and deployments through Infrastructure as Code (Terraform) and CI/CD pipelines (GitOps)

• Integrate and operationalize generative AI services, notably Amazon Bedrock (model selection, RAG, AI usage governance)

• Own the cloud security architecture, in partnership with our Information Security Officer, who covers ISO 27001/SOC 2 compliance: IAM, encryption, network segmentation, cluster hardening, threat modeling

• Define operational resilience practices: disaster recovery (RTO/RPO), backup strategy, SLA/SLO

• Mentor and upskill the DevOps and engineering teams

• Maintain active technology watch and challenge existing architecture choices

What success looks like

30 days: Understand and diagnose

• You've completed a full audit of the current platform: Kubernetes setup (shared cluster, namespace-per-tenant), network, IaC and CI/CD maturity, and you've mapped the gaps against a production-grade SaaS (HA, horizontal scalability, WAF, observability).

• You've built working relationships with the Cloud/DevOps and Platform teams and established a lightweight architecture review ritual with them.

• You share a prioritized diagnosis with the Head of Architecture: what's solid, what's at risk, what blocks our first customer.

60 days : Define the target and unblock

• The target multi-tenant architecture is documented and validated: tenant isolation model, HA strategy, horizontal scaling approach, and the security baseline (including WAF).

• The IaC and GitOps roadmap is defined, and the first components are managed through Terraform and automated pipelines.

• You've identified the integration pattern for generative AI services (Amazon Bedrock) and validated it with the Platform team.

90 days : Execute toward our first customer

• The critical gaps for production readiness (HA, scalability, WAF) are either resolved or scheduled with clear owners and dates.

• A production-readiness checklist for onboarding our first SaaS customer is defined and agreed with the teams, you own the architecture sign-off.

• Teams are progressively upskilled: architecture decisions are documented (ADRs), and the DevOps team is autonomous on the new IaC foundations.

The person we're looking for

We're not looking for an architect by training who's only ever advised from the outside. The person who thrives here has likely grown into architecture from a hands-on DevOps or backend engineering background, someone who's done the "run" before stepping into design, and who's comfortable in organizations where roles aren't siloed.

Experience & certifications:

Senior experience in cloud architecture and infrastructure, including several years in critical production environments

• Hands-on experience taking a SaaS product to production from its early stages

• AWS certification required (Solutions Architect Professional preferred)

Technical skills:

• Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers)

• Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD)

• Multi-tenant architecture: tenant isolation, data modeling, onboarding flows

• Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition

• Data layer: managed databases, storage, and data migration

• Cloud-native security: IAM, secrets management, encryption, audit practices (in partnership with our security team on ISO 27001, SOC 2, GDPR)

• Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...)

• Cost-conscious cloud engineering (FinOps): cost optimization and budget governance

• Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus

• Daily, hands-on use of AI-assisted coding tools

Nice-to-have:

• Certification on a second cloud provider (Azure, GCP)

• Familiarity with EU data residency/sovereignty requirements (relevant given GDPR compliance and sovereign cloud options)

• AI-assisted intelligent monitoring and alerting

Soft skills

• Ability to make complex technical topics accessible to varied audiences

• Technical leadership and genuine appetite for mentoring

• Pragmatism and comfortable getting hands-on operationally when needed, without staying there

• Autonomy and rigor ability to move forward without constant supervision in a team that's still taking shape

• Professional French and English

Hiring process

Our process is designed to move quickly, give you full visibility at every stage, and make the best use of your time.

1. Screening call with HR (45 min)

2. Interview with the hiring manager (1h)

3. Live technical role play interview (1h)

4. Final interview with CHRO (1h)