{"id":2122486,"url":"https://alion.io/job/cohesity-it-architect","title":"IT Architect","company":{"id":1043373,"name":"Cohesity","domain":"cohesity.com","url":"https://alion.io/company/cohesity-3","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Heathrow, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140800,"max":176000,"currency":"USD","period":"year","gross":null,"usd_annual":176000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Ansible","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"DNS","optional":false},{"name":"Dynatrace","optional":false},{"name":"FinOps","optional":false},{"name":"GitOps","optional":false},{"name":"Hallucination","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"MuleSoft","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"ServiceNow","optional":false},{"name":"Terraform","optional":false},{"name":"Tool Use","optional":false},{"name":"Zero Trust","optional":false},{"name":"Apex","optional":true}],"status":"live","first_seen_at":"2026-08-10T00:00:00Z","employer_posted_date":"2026-08-10","last_verified_at":"2026-10-12T02:25:03Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"We strongly prefer candidates who are currently located in or near the designated job location. Candidates outside the area should apply only if they are committed to relocating prior to their start date and have the legal right to work in the job location.\nCohesity is a leader in AI-powered data security and management. Aided by an extensive ecosystem of partners, Cohesity makes it easy to secure, protect, manage, and get value from data - across the data center, edge, and cloud. Cohesity helps organizations defend against cybersecurity threats with comprehensive data security and management capabilities, including immutable backup snapshots, AI-based threat detection, monitoring for malicious behavior, and rapid recovery at scale.\nWe’ve been named a Leader by multiple analyst firms and have been globally recognized for Innovation, Product Strength, and Simplicity in Design.\nJoin us on our mission to shape the future of our industry.\nAbout the Role\nWe are looking for an IT Architect to join our Core Platform & Lab Services organization based in our Heathrow, FL office. This is a senior individual contributor role on the CPLS team with primary ownership of AWS cloud architecture and broad responsibility across Cohesity's hybrid infrastructure -- including the physical lab environment that directly enables Cohesity's product engineering and QA teams.\nAs an IT Architect, you will be the design authority for cloud and infrastructure initiatives, translating business requirements and IT strategy into scalable, secure, and operationally sustainable architectures. You will define standards, produce reference architectures, and work closely with engineering, operations, security, and IT leadership to ensure what gets built is what should be built.\nThis is not an implementation role. You will operate ahead of delivery: designing, deciding, governing, and enabling the engineers who build and operate the systems you architect. You will own Architecture Decision Records, participate in architecture governance, and be a sought-out voice for design input across the team.\nWhat You Will Do\nAWS & Cloud Architecture\nOwn the architecture of Cohesity's AWS environment, including landing zone design, account structure, network topology, IAM, and cost governance.\nDefine and maintain cloud architecture standards and guardrails across compute, storage, networking, containers, and serverless services.\nArchitect multi-account AWS environments using AWS Organizations, Control Tower, and Service Control Policies.\nDesign and govern cloud-native and hybrid connectivity patterns including Direct Connect, Transit Gateway, VPC peering, and PrivateLink.\nLead FinOps architecture: define tagging standards, cost allocation models, Reserved Instance and Savings Plan strategies, and cloud cost governance frameworks.\nDrive infrastructure-as-code adoption using Terraform and Ansible across the AWS environment; define IaC standards and module patterns for engineering teams.\nEvaluate and recommend AWS services and architectural patterns; produce documented trade-off analyses with clear recommendations.\nEngineering Lab Infrastructure Architecture\nOwn the architecture of Cohesity's three physical engineering lab facilities, which collectively support 50,000+ VMs and 10,000+ hardware devices serving Cohesity product engineering and QA teams.\nDesign virtualization, compute, storage, and networking architecture for lab environments at scale, including resource pooling, tenant isolation, and capacity management across concurrent product workloads.\nArchitect hardware lifecycle and bare-metal provisioning workflows; define automation frameworks for VM provisioning, environment management, and self-service infrastructure consumption.\nDefine observability and resiliency architecture for lab environments; ensure lab availability and performance meet the needs of internal product engineering teams.\nHybrid Infrastructure Architecture\nArchitect hybrid infrastructure solutions spanning on-premises data centers, AWS, and other hyperscalers.\nDefine integration patterns and connectivity standards between on-premises environments and cloud, including identity federation and network segmentation.\nDesign compute, storage, and networking architectures for enterprise workloads across hybrid environments.\nArchitect disaster recovery and resiliency patterns; define RTO/RPO requirements and validate through design.\nMaintain service dependency models in CMDB to support impact analysis and incident response.\nAI Infrastructure Architecture\nOwn the infrastructure architecture for Cohesity's internal AI foundry platform: GPU and accelerator compute environments, multi-tenant model serving infrastructure, and AI data pipeline architecture.\nDesign AI agent orchestration infrastructure: tool-use patterns, multi-agent system topology, and MCP/API integration patterns that are safe and governable at enterprise scale.\nArchitect the AI API gateway layer: model routing, rate limiting, cost allocation, audit logging, and controls that prevent ungoverned shadow AI consumption across the organization.\nDefine the observability architecture for AI workloads as a distinct layer from traditional infrastructure monitoring -- covering model drift detection, hallucination and quality monitoring, and prompt/response logging for compliance and evaluation pipelines.\nArchitect AI-specific security controls: IAM and zero-trust patterns extended to AI workloads, LLM-specific attack surface coverage including prompt injection, data exfiltration via model output, and supply chain risks in model and tool dependencies.\nPartner with enterprise technology team on application and model layer architecture; ensure the infrastructure layer is designed to support their roadmap without creating platform constraints.\nPlatform & Enterprise Services Architecture\nContribute to CMDB governance and CI lifecycle architecture; define and maintain service dependency and data model standards.\nArchitect Kubernetes-based platform services; define container orchestration standards, Helm patterns, and GitOps workflows.\nIntegration & Data Architecture\nDesign integration patterns between enterprise SaaS platforms, internal systems, and AWS-hosted services.\nDefine API governance standards, event-driven integration patterns, and data flow architecture.\nEnsure data architecture aligns with IT governance, CMDB, and asset management requirements.\nStandards, Governance & Roadmap\nCo-own the CPLS technology roadmap with IT leadership; translate architectural direction into prioritized initiatives with clear business rationale.\nOwn Architecture Decision Records (ADRs) for significant design choices; document context, options, decision, and consequences.\nDefine and maintain reference architectures and architecture standards for assigned domains.\nParticipate in architecture review and provide design approval for initiatives within the domain.\nReduce architectural fragmentation by championing reusable, documented patterns over bespoke one-off implementations.\nProduce curated, opinionated technology guidance for the CPLS team: translate emerging technology into clear assessments of what it means for our existing architecture and what we should do about it.\nCross-Functional Leadership & Mentorship\nPartner with IT engineering, operations, network, security, and service management teams to ensure architectures are viable, secure, and operable.\nCommunicate architectural decisions clearly to both technical peers and non-technical stakeholders including IT leadership.\nMentor IC3/IC4 engineers; provide design guidance and architectural review for complex implementations.\nContribute to the technical growth of the broader IT team through documentation, design reviews, and knowledge sharing.\nWhat You Bring\nRequired\n8+ years of experience in IT infrastructure or cloud architecture roles, with at least 4 years focused on AWS.\nDeep, hands-on AWS expertise: VPC, EC2, S3, RDS, EKS, Lambda, IAM, Organizations, Control Tower, Transit Gateway, Direct Connect, and related services.\nDemonstrated experience designing and governing multi-account AWS environments at enterprise scale.\nStrong proficiency in infrastructure-as-code, specifically Terraform; experience with Ansible or equivalent.\nExperience architecting large-scale virtualization environments; familiarity with VM lifecycle management, resource scheduling, and multi-tenant isolation at scale.\nExperience architecting hybrid cloud environments connecting on-premises infrastructure to AWS.\nProficiency in cloud cost management: tagging strategies, cost allocation, Reserved Instance planning, and FinOps frameworks.\nExperience with identity and access management architecture including Entra ID, SSO/SAML/OIDC, RBAC, and zero-trust network access.\nStrong understanding of network architecture: routing, DNS, firewalls, load balancing, and hybrid connectivity patterns.\nExperience producing architecture documentation including high-level designs, reference architectures, and ADRs.\nDemonstrated ability to influence technical direction across teams without direct authority.\nStrong communication skills: able to translate complex architectural decisions for both engineering and executive audiences.\nPreferred\nAWS Solutions Architect Professional certification or equivalent demonstrated expertise.\nExperience architecting physical datacenter or lab environments at significant scale (thousands of physical devices or tens of thousands of VMs).\nExperience with bare-metal provisioning frameworks and hardware lifecycle automation.\nExperience with Kubernetes and container platform architecture (EKS, Helm, GitOps).\nExperience architecting AI/ML infrastructure including GPU compute environments, model serving platforms, and AI API gateway patterns.\nFamiliarity with AI agent frameworks, multi-agent orchestration patterns, or MCP/tool-use integration architectures.\nUnderstanding of LLM-specific security risks including prompt injection, model output exfiltration, and AI supply chain threats.\nFamiliarity with AI observability concepts: model drift detection, quality monitoring, and prompt/response logging for compliance pipelines.\nFamiliarity with observability platforms such as Dynatrace or equivalent APM/monitoring tools.\nExperience with ServiceNow CMDB and IT asset management architecture.\nFamiliarity with enterprise integration and iPaaS platforms (Workato, MuleSoft, or equivalent).\nExperience in a high-growth technology company or similarly fast-paced enterprise IT environment.\nWho Thrives in This Role\nThis role is a strong fit if you are someone who:\nThinks in systems, not just components -- you naturally consider second-order effects and cross-domain dependencies.\nMakes architectural decisions on rapidly evolving technology -- you set a defensible direction while tooling and best practices are still maturing, and you revisit that direction without ego when the landscape shifts.\nWrites decisions down: you understand that undocumented architecture is architecture that will be re-litigated in six months.\nTakes operational reality seriously: you design things that can actually be built, operated, and supported.\nHas a point of view on technology and shares it: you translate emerging trends into clear, opinionated guidance on what they mean for our architecture and what we should do about them.\nIs a collaborator and a teacher: you get energy from enabling engineers to do better work, not from being the only one who knows the answer.\nHolds a high bar without being a blocker: you make architecture review a force multiplier, not a bottleneck.\nThis role is not a fit if you are looking primarily for hands-on implementation work. You will be most effective if you are energized by design, governance, and organizational influence -- with occasional deep dives into technical detail to support the work.\n#LI-RB1\nDisclosure Pursuant to Applicable State Equal Pay Transparency Laws - This position has a starti...","description_format":"text","description_chars":14043,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Insurance coverage","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-09T00:01:34Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 104 · green card filings: 23","filings_12m":104,"filings_prev_12m":125,"green_card_filings_12m":23,"median_offered_wage_usd":173878,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":76}],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.668,"p_room":0.44,"age_days":61,"expected_fill_days":45,"reasons":["conf:7","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":176000,"is_top_pay":false},"html_url":"https://alion.io/job/cohesity-it-architect","json_url":"https://alion.io/job/cohesity-it-architect.json","meta":{"generated_at":"2026-10-12T04:04:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6385,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1043373},"rest":"https://alion.io/mcp/rest/get_company?id=1043373"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcohesity-it-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcohesity-it-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcohesity-it-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cohesity-it-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcohesity-it-architect"}]}