Platform Architect – AWS_Azure_/Networking

By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use.  I further attest that all information I submit in my employment application is true to the best of my knowledge.

OBJECTIVES/PURPOSE

As a Senior Cloud Platform Architect, you will provide architectural leadership for Takeda’s hybrid-cloud networking and security capabilities across AWS and Azure.

The role’s primary focus is to maintain and continuously improve the mature AWS cloud networking platform while leading the development of Azure into an enterprise-ready platform with comparable capabilities, governance, security, automation, and operational maturity.

You will:

·                Serve as the subject-matter expert for hybrid-cloud networking, connectivity, segmentation, traffic inspection, and cloud security architecture.

·                Maintain and improve AWS networking posture across the existing landing zone, ensuring scalability, resiliency, security, performance, and operational effectiveness.

·                Design and mature the Azure platform, including secure connectivity to Takeda’s internal network and support for application deployment across AWS and Azure.

·                Establish consistent multi-cloud architecture patterns using AWS, Azure, Aviatrix, Palo Alto Networks, and infrastructure as code.

·                Define cloud networking and security standards, guardrails, reference architectures, and operational practices.

·                Enable application and product teams to deploy secure, compliant, and well-connected workloads across AWS and Azure.

·                Contribute to cloud strategy, governance, service models, and the hybrid-cloud operating model.

·                Lead continuous improvement of platform capabilities through automation, standardization, and engineering excellence.

·                ACCOUNTABILITIES

·                Lead the architecture, governance, and continuous improvement of hybrid-cloud networking across AWS, Azure, Aviatrix, and Palo Alto Networks.

·                Maintain and improve the mature AWS landing-zone networking posture, including connectivity, routing, segmentation, traffic inspection, DNS, resiliency, security, and performance.

·                Lead the development and maturation of the Azure platform, including secure connectivity and support for application deployment across AWS and Azure.

·                Define reusable multi-cloud network and security patterns using AWS and Azure native services, Aviatrix, Palo Alto Networks, and Terraform.

·                Establish standards, guardrails, reference architectures, and operating practices for cloud networking, security, monitoring, governance, and compliance.

·                Design and govern connectivity using services such as AWS Transit Gateway, RAM, Direct Connect, VPN, PrivateLink, Route 53, Network Firewall, Azure ExpressRoute, VPN Gateway, Virtual WAN, Azure Firewall, and Private Link.

·                Implement and integrate cloud security and monitoring capabilities, including GuardDuty, Security Hub, CloudTrail, Config, Inspector, Macie, CloudWatch, SIEM, SOC, and SOAR solutions.

·                Ensure cloud infrastructure and network configurations are automated, tested, version-controlled, and maintained through Terraform and other infrastructure-as-code practices.

·                Provide architecture reviews, technical leadership, troubleshooting support, and guidance for complex cloud networking, security, connectivity, and platform initiatives.

·                Partner with cybersecurity, enterprise architecture, infrastructure, operations, application, and compliance teams to enable secure, reliable, and scalable cloud adoption.

·                Evaluate emerging cloud technologies, lead proofs of concept, and drive continuous improvement in platform maturity, resiliency, operational efficiency, and cost effectiveness.

·                Communicate the health, risks, roadmap, and strategic direction of AWS and Azure platform capabilities to relevant stakeholders.

·                 

·                EDUCATION, BEHAVIOURAL COMPETENCIES AND SKILLS:

·                Required:

·                Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline; equivalent experience may be considered.

·                8+ years of experience across cloud architecture, enterprise networking, infrastructure, security, DevOps, or operations.

·                5+ years of experience designing and implementing AWS networking and hybrid-cloud architectures.

·                Experience designing or maturing Azure platforms and hybrid connectivity.

·                Strong hands-on knowledge of AWS networking, cloud security, routing, DNS, firewalls, and hybrid connectivity.

·                Experience with Terraform and infrastructure-as-code practices.

·                Experience with Palo Alto Networks firewalls and Aviatrix multi-cloud networking.

·                Strong understanding of network segmentation, centralized inspection, zero-trust principles, and least-privilege access.

·                Experience integrating cloud monitoring and security services with enterprise SIEM, SOC, or SOAR platforms.

·                Excellent communication, stakeholder-management, problem-solving, and technical documentation skills.

·                 

·                Preferred:

·                AWS Certified Solutions Architect – Professional.

·                AWS Certified Advanced Networking – Specialty.

·                AWS Certified Security – Specialty.

·                Microsoft Certified: Azure Solutions Architect Expert or equivalent.

·                Experience in life sciences, pharmaceuticals, healthcare, or another regulated industry.

·                Experience with AWS Transit Gateway, RAM, Direct Connect, VPN, PrivateLink, Route 53, Network Firewall, GuardDuty, Security Hub, CloudTrail, Config, Inspector, and Macie.

·                Experience with Azure ExpressRoute, VPN Gateway, Virtual WAN, Azure Firewall, Private Link, and private endpoints.

·                Experience implementing cloud governance, compliance controls, and policy as code.

·                Familiarity with GxP, SOX, GDPR, NIST, CIS, ISO 27001, or similar requirements.

·                Experience working with globally distributed Agile and virtual teams.

·