{"id":3559838,"url":"https://alion.io/job/morgan-stanley-cloud-platform-architect","title":"Cloud Platform Architect","company":{"id":40230,"name":"Morgan Stanley","domain":"morganstanley.com","url":"https://alion.io/company/morgan-stanley","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"A","score":89,"open_postings":192,"ghost_share":0,"stale_share":0.411,"repost_share":0.016,"time_to_fill_p50_days":59,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alpharetta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":122000,"max_usd":239000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":589},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"Amazon EC2","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Amazon S3","optional":true},{"name":"FinOps","optional":true},{"name":"Service Mesh","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-16T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T23:50:10Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Cloud & Infrastructure Engineering position at the Director level, which is part of the job family responsible for managing and optimizing technical infrastructure and ensuring the seamless operation of IT systems to support business needs effectively.\nMorgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.\nInterested in joining a team that’s eager to create, innovate and make an impact on the world? Read on.\nPEArch is seeking a Cloud Platform Engineering Architect to support the ETRADE Cloud program. The role will contribute to the design and evolution of secure, resilient, scalable, automated, and well-governed platform capabilities, with primary expertise in Google Cloud Platform (GCP). The architect will translate application, business, security, infrastructure, and operational requirements into reusable platform architecture patterns aligned with enterprise architecture, engineering, risk, and regulatory standards.\nThe architect will work across platform engineering, application development, cloud infrastructure, cybersecurity, networking, operations, risk, and governance teams. The role will shape target-state and transitional architectures, establish reusable platform patterns, support proofs of concept, and guide engineering teams through implementation and production readiness. The primary focus is enabling ETRADE workloads on GCP while supporting integration with existing enterprise environments and, where applicable, AWS services.\nWhat you’ll do in the role:\nOwn and contribute to end-to-end platform engineering architecture for ETRADE cloud capabilities, from conceptual design through implementation and production readiness.\nDefine target-state, transitional, and migration architectures for applications moving from existing environments to secure cloud-native platforms.\nDevelop reference architectures, architecture principles, reusable patterns, standards, guardrails, and decision records for platform services.\nDesign cloud landing-zone capabilities covering organization and project structures, networking, identity, security controls, logging, monitoring, policy enforcement, and operational governance.\nCreate platform architecture patterns for Kubernetes, workload identity, APIs, event-driven services, data services, observability, resiliency, and automation.\nDesign and guide GCP capabilities using GKE, Compute Engine, Cloud Storage, Cloud SQL, Pub/Sub, Cloud Load Balancing, Cloud DNS, Secret Manager, Cloud KMS, and Cloud Monitoring.\nDefine platform product capabilities and paved-road patterns that enable secure self-service provisioning, consistent developer experience, and repeatable workload onboarding.\nEstablish architecture for infrastructure as code, CI/CD, GitOps, policy as code, configuration management, automated testing, vulnerability scanning, artifact governance, and environment promotion.\nDesign infrastructure architecture covering virtual networks, subnets, routing, firewalls, private connectivity, ingress, egress, DNS, proxies, load balancing, certificates, secrets, and key management.\nDefine secure connectivity patterns across GCP, enterprise data centers, SaaS providers, external services, and AWS where required.\nGuide GKE and Kubernetes architecture including private clusters, workload identity, secrets management, ingress, autoscaling, network policy, cluster security, resiliency, upgrades, and lifecycle management.\nDefine identity and access-management patterns for federation, service accounts, role-based access, workload identity, privileged access, and least-privilege controls.\nDefine high-availability, disaster-recovery, backup, restoration, capacity, performance, observability, and production-support architecture patterns.\nLead and participate in architecture reviews, technical evaluations, risk assessments, and POCs; document decisions, trade-offs, dependencies, risks, and remediation actions.\nCreate and maintain context, logical, physical, deployment, security, network, integration, sequence, and data-flow architecture artifacts.\nPartner with product, application, engineering, security, infrastructure, risk, governance, and operations stakeholders to drive architecture decisions through implementation and closure.\nMentor engineering teams on platform architecture standards, pattern adoption, non-functional requirements, and production-readiness expectations.\nArchitecture Focus Area:\nGCP Platform Architecture - Organization and project structure; landing zones; IAM; shared VPC; organization policies; GKE; compute; storage; databases; messaging; security; observability.\nPlatform Engineering Architecture - Platform-as-a-product; self-service provisioning; reusable services and templates; paved-road patterns; developer experience; service lifecycle; platform APIs; onboarding and adoption.\nInfrastructure Architecture - Compute; storage; networking; routing; DNS; firewalls; load balancing; proxies; private connectivity; ingress and egress; certificates; secrets; key management.\nCloud-Native Engineering - Kubernetes and GKE; CI/CD; GitOps; infrastructure as code; policy as code; configuration automation; software supply chain; developer enablement.\nCloud Security & IAM - Workforce and workload identity; federation; service accounts; least privilege; encryption; secrets management; segmentation; auditability; security monitoring.\nResilience & Operations - High availability; multi-zone and multi-region design; disaster recovery; backup; observability; incident readiness; SRE practices; production support.\nApplication Modernization - Migration strategies; containerization; microservices; API enablement; event-driven patterns; data integration; legacy-platform interoperability.\nGovernance & Controls - Architecture governance; cloud guardrails; standards; risk tracking; regulatory alignment; cost controls; compliance evidence; production-readiness reviews.\nWhat you’ll bring to the role:\nProfessional experience in cloud engineering, platform engineering, infrastructure engineering, solution architecture, or a related technical discipline.\nHands-on knowledge of Google Cloud Platform, including organizations, folders, projects, billing structures, IAM, service accounts, organization policies, shared VPCs, and landing zones.\nExperience with GCP compute, container, storage, networking, security, messaging, database, monitoring, and automation services.\nWorking knowledge of Google Kubernetes Engine and Kubernetes, including private clusters, node pools, workload identity, network policies, ingress, autoscaling, upgrades, security, and resiliency.\nWorking knowledge of GCP networking, including VPCs, subnets, routing, firewall policies, Private Service Connect, private service access, Cloud NAT, Cloud DNS, load balancing, VPN, and dedicated connectivity.\nStrong infrastructure foundation across compute, storage, networking, DNS, load balancing, proxies, firewalls, certificates, secrets, and key management.\nExperience with Terraform or comparable infrastructure-as-code technologies, CI/CD, GitOps, policy as code, automated testing, vulnerability scanning, and release governance.\nUnderstanding of platform engineering principles including platform-as-a-product, self-service capabilities, reusable templates, paved roads, developer experience, automation, and platform lifecycle management.\nFamiliarity with cloud migration and modernization patterns including rehosting, replatforming, refactoring, containerization, decomposition, and phased migration.\nFamiliarity with APIs, API gateways, microservices, event-driven architecture, messaging, caching, relational databases, and NoSQL platforms.\nAbility to define monitoring, logging, tracing, alerting, audit logging, service-level indicators, and service-level objectives.\nKnowledge of high availability, disaster recovery, backup and restoration, capacity planning, performance engineering, cost optimization, and operational readiness.\nExperience creating architecture diagrams, reference patterns, standards, architecture decision records, and implementation guidance for engineering teams.\nExposure to financial services, regulated industries, or similarly high-control environments.\nPreferred / Nice-to-Have Qualifications\nExperience supporting large-scale cloud transformation, platform modernization, or application migration programs.\nExperience with AWS architecture and core services such as VPC, IAM, EKS, EC2, S3, RDS, KMS, Route 53, load balancing, private connectivity, and CloudWatch.\nExposure to hybrid or multi-cloud architectures spanning GCP, AWS, enterprise data centers, and third-party providers, including identity federation and cross-cloud connectivity.\nExposure to Digital Assets platforms, including custody technology, tokenization, blockchain integration, wallet and key-management concepts, transaction workflows, and secure connectivity to third-party providers.\nExperience supporting digital brokerage, trading, wealth management, banking, or other financial-services workloads.\nFamiliarity with cloud cost management, resource optimization, capacity management, and FinOps practices.\nFamiliarity with service mesh, API management, container security, software-supply-chain security, and zero-trust architecture.\nFamiliarity with financial-services controls, technology-risk management, security architecture reviews, change governance, and production-readiness assessments.\nGoogle Cloud, AWS, Kubernetes, security, networking, or enterprise architecture certifications.\nProfessional Skills\nSound technical judgment with the ability to balance security, resilience, scalability, performance, cost, portability, delivery speed, and operational complexity.\nStrong written and verbal communication for engineering, risk, governance, and leadership audiences.\nAbility to lead and contribute effectively to cross-functional technical discussions and drive decisions and actions through closure.\nAbility to translate complex technical topics into clear architecture recommendations and practical implementation guidance.\nStrong documentation discipline, analytical problem-solving skills, and attention to implementation detail.\nAbility to collaborate across organizational boundaries, mentor engineers, share knowledge, and influence without direct authority.\nExpected Deliverables\nETRADE target-state, transitional, and migration cloud platform architectures.\nGCP landing-zone, project, network, identity, security, governance, and operational architecture documentation.\nPlatform engineering reference architectures, paved-road patterns, self-service blueprints, and workload-onboarding standards.\nGKE and Kubernetes reference patterns and implementation guidance.\nInfrastructure architecture artifacts covering compute, storage, networking, ingress, egress, DNS, load balancing, certificates, secrets, and encryption.\nCloud migration and application-modernization architecture documentation.\nCI/CD, GitOps, infrastructure-as-code, policy-as-code, resiliency, observability, and operational-readiness standards.\nArchitecture diagrams, decision records, implementation guides, POC documentation, risk tracking, and remediation updates.\nWHAT YOU CAN EXPECT FROM MORGAN STANLEY:\nAt Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that’s differentiated - and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our...","description_format":"text","description_chars":13381,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Investment Banking & M&A Advisory","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-31T03:17:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 261 · green card filings: 46","filings_12m":261,"filings_prev_12m":208,"green_card_filings_12m":46,"median_offered_wage_usd":202500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":5}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.896,"p_room":1,"age_days":18,"expected_fill_days":59,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/morgan-stanley-cloud-platform-architect","json_url":"https://alion.io/job/morgan-stanley-cloud-platform-architect.json","meta":{"generated_at":"2026-11-04T04:43:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7268,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40230},"rest":"https://alion.io/mcp/rest/get_company?id=40230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmorgan-stanley-cloud-platform-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmorgan-stanley-cloud-platform-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmorgan-stanley-cloud-platform-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/morgan-stanley-cloud-platform-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmorgan-stanley-cloud-platform-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3559838}},{"tool":"search_jobs","arguments":{"company":"morganstanley.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3559838},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}