What You Will Do
AWS & Cloud Architecture
• Own the architecture of Cohesity’s AWS environment, including landing zone design, account structure, network topology, IAM, and cost governance.
• Define and maintain cloud architecture standards and guardrails across compute, storage, networking, containers, and serverless services.
• Architect multi-account AWS environments using AWS Organizations, Control Tower, and Service Control Policies.
• Design and govern cloud-native and hybrid connectivity patterns including Direct Connect, Transit Gateway, VPC peering, and PrivateLink.
• Lead FinOps architecture: define tagging standards, cost allocation models, Reserved Instance and Savings Plan strategies, and cloud cost governance frameworks.
• Drive infrastructure-as-code adoption using Terraform and Ansible across the AWS environment; define IaC standards and module patterns for engineering teams.
• Evaluate and recommend AWS services and architectural patterns; produce documented trade-off analyses with clear recommendations.
Engineering Lab Infrastructure Architecture
• Own the architecture of Cohesity’s three physical engineering lab facilities, which collectively support 50,000+ VMs and 10,000+ hardware devices serving Cohesity product engineering and QA teams.
• Design virtualization, compute, storage, and networking architecture for lab environments at scale, including resource pooling, tenant isolation, and capacity management across concurrent product workloads.
• Architect hardware lifecycle and bare-metal provisioning workflows; define automation frameworks for VM provisioning, environment management, and self-service infrastructure consumption.
• Define observability and resiliency architecture for lab environments; ensure lab availability and performance meet the needs of internal product engineering teams.
Hybrid Infrastructure Architecture
• Architect hybrid infrastructure solutions spanning on-premises data centers, AWS, and other hyperscalers.
• Define integration patterns and connectivity standards between on-premises environments and cloud, including identity federation and network segmentation.
• Design compute, storage, and networking architectures for enterprise workloads across hybrid environments.
• Architect disaster recovery and resiliency patterns; define RTO/RPO requirements and validate through design.
• Maintain service dependency models in CMDB to support impact analysis and incident response.
AI Infrastructure Architecture
• Own the infrastructure architecture for Cohesity’s internal AI foundry platform: GPU and accelerator compute environments, multi-tenant model serving infrastructure, and AI data pipeline architecture.
• Design AI agent orchestration infrastructure: tool-use patterns, multi-agent system topology, and MCP/API integration patterns that are safe and governable at enterprise scale.
• Architect the AI API gateway layer: model routing, rate limiting, cost allocation, audit logging, and controls that prevent ungoverned shadow AI consumption across the organization.
• Define the observability architecture for AI workloads as a distinct layer from traditional infrastructure monitoring – covering model drift detection, hallucination and quality monitoring, and prompt/response logging for compliance and evaluation pipelines.
• Architect AI-specific security controls: IAM and zero-trust patterns extended to AI workloads, LLM-specific attack surface coverage including prompt injection, data exfiltration via model output, and supply chain risks in model and tool dependencies.
• Partner with enterprise technology team on application and model layer architecture; ensure the infrastructure layer is designed to support their roadmap without creating platform constraints.
Platform & Enterprise Services Architecture
• Contribute to CMDB governance and CI lifecycle architecture; define and maintain service dependency and data model standards.
• Architect Kubernetes-based platform services; define container orchestration standards, Helm patterns, and GitOps workflows.
Integration & Data Architecture
• Design integration patterns between enterprise SaaS platforms, internal systems, and AWS-hosted services.
• Define API governance standards, event-driven integration patterns, and data flow architecture.
• Ensure data architecture aligns with IT governance, CMDB, and asset management requirements.
Standards, Governance & Roadmap
• Co-own the CPLS technology roadmap with IT leadership; translate architectural direction into prioritized initiatives with clear business rationale.
• Own Architecture Decision Records (ADRs) for significant design choices; document context, options, decision, and consequences.
• Define and maintain reference architectures and architecture standards for assigned domains.
• Participate in architecture review and provide design approval for initiatives within the domain.
• Reduce architectural fragmentation by championing reusable, documented patterns over bespoke one-off implementations.
• Produce curated, opinionated technology guidance for the CPLS team: translate emerging technology into clear assessments of what it means for our existing architecture and what we should do about it.
Cross-Functional Leadership & Mentorship
• Partner with IT engineering, operations, network, security, and service management teams to ensure architectures are viable, secure, and operable.
• Communicate architectural decisions clearly to both technical peers and non-technical stakeholders including IT leadership.
• Mentor IC3/IC4 engineers; provide design guidance and architectural review for complex implementations.
• Contribute to the technical growth of the broader IT team through documentation, design reviews, and knowledge sharing.