Enterprise Architect

Company Description

Sopra Steria offers tailored, end-to-end corporate technology and software solutions to help clients make bold choices and deliver results. Successfully so With more than 51.000 colleagues in 30 countries, we rank as Europe’s leading digital solutions provider. Some of the most successful companies in Europe rely on our technology due to our commitment to innovation, collaboration, and value in business development.

The world is how we shape it. Let’s shape it together.

Job Description

We are looking for an Enterprise Architect specializing in Cloud & Digital Sovereignty to help shape our enterprise cloud strategy and architecture.

In this role, you will define and evolve our cloud architecture across public, private, hybrid, multi-cloud, and sovereign cloud environments, ensuring that technology choices align with business objectives as well as security, regulatory, data residency, and digital sovereignty requirements.

You will work at the intersection of enterprise architecture, cloud, security, legal and regulatory requirements, helping the organisation make informed architectural decisions in an increasingly complex European cloud landscape.

Key Responsibilities

• Cloud Strategy: Define and evolve the enterprise cloud architecture strategy across public, private, hybrid, multi-cloud, and sovereign cloud environments, aligned with business, technology, security, and regulatory objectives.
• Target Architecture: Define target-state cloud architectures and reference patterns covering compute, storage, networking, identity, integration, platform services, and cloud-native capabilities.
• Digital Sovereignty: Translate digital sovereignty requirements into architecture principles and design choices, considering areas such as data residency, jurisdiction, operational control, technological dependency, and exposure to extraterritorial legislation.
• Cloud Governance: Define and promote cloud governance principles and guardrails, including landing zones, account and subscription structures, policy enforcement, tagging, cost governance, and workload placement.
• Security Architecture: Establish cloud architecture principles for identity and access management, network security, encryption, key management, secrets management, and Zero Trust.
• Sovereign Cloud: Assess sovereign and trusted cloud models and determine where they fit within the enterprise cloud strategy, based on workload sensitivity, regulatory requirements, risk, and business needs.
• Regulatory Collaboration: Work closely with Legal, Compliance, Security, Risk, and Data Protection stakeholders to translate applicable regulatory and sovereignty requirements into architecture decisions.
• Cloud Migration & Modernisation: Guide application, platform, and infrastructure teams through cloud migration and modernisation initiatives while maintaining architectural consistency and addressing relevant sovereignty requirements.
• Portability & Reversibility: Define architecture principles for portability, interoperability, exit strategies, and reversibility to manage strategic dependencies and vendor lock-in.
• Architecture Reviews: Lead architecture reviews and contribute to technology risk assessments for cloud initiatives, with particular attention to data classification, jurisdiction, security, resilience, and sovereignty.
• Executive Advisory: Advise senior stakeholders on cloud architecture, digital sovereignty, technology dependencies, associated risks, and strategic trade-offs.
• Technology & Regulatory Watch: Monitor developments in cloud technology, European digital sovereignty, cybersecurity, and regulation and assess their potential impact on the enterprise architecture roadmap.

Qualifications

• Extensive experience in cloud architecture, infrastructure architecture, enterprise architecture, or comparable technical leadership roles.
• Deep expertise in at least one major cloud ecosystem, such as Microsoft Azure, AWS, or Google Cloud, combined with a good understanding of broader hybrid and multi-cloud architecture principles.
• Strong understanding of digital sovereignty and cloud-related regulatory considerations, including topics such as data residency, jurisdiction, GDPR, NIS2, and extraterritorial legislation such as the US CLOUD Act.
• Experience designing or governing cloud landing zones, multi-account or multi-subscription environments, and cloud security architectures.
• Strong understanding of identity and access management, network architecture, encryption, key management, secrets management, and Zero Trust principles in cloud environments.
• Understanding of cryptographic key management models, includin