Job description

Work with a Top 20 CPA and advisory firm that Accounts for Anything. Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Job Sumamry Aprio is seeking a Senior Cloud Architect to join its Risk Advisory & Assurance | Automation Services practice and help organizations design, modernize, and protect cloud environments while navigating complex cybersecurity, regulatory, and operational requirements. In this role, you will lead cloud architecture engagements from discovery through delivery, translating business, security, and compliance requirements into resilient, scalable, and supportable solutions across Microsoft Azure, AWS, and Google Cloud. You will serve as the senior technical authority for clients navigating cloud adoption, modernization, Zero Trust, governance, and regulated-environment initiatives while helping delivery teams apply repeatable architecture and engineering practices. This position supports U.S. government and defense-related clients; certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client-defined access requirements for controlled environment What You'll Gain / Impact: Opportunity to serve as the senior technical authority on high-complexity cloud transformation and cybersecurity engagements. Exposure to a broad range of client environments, including U.S. government, defense, and regulated industries. Ability to shape cloud strategy, architecture standards, and security practices that drive lasting organizational change. Hands-on experience architecting multi-cloud solutions across Azure, AWS, and Google Cloud in real-world, high-stakes environments. Platform to lead, mentor, and develop architects and engineers within a growing, purpose-driven consulting practice. Key Responsibilities: Lead client engagements from discovery through delivery, serving as the senior technical consultant and architecture authority. Facilitate executive briefings, workshops, and architecture sessions that translate business objectives, risk tolerance, and compliance obligations into actionable cloud strategies. Develop current-state and target-state architectures covering applications, infrastructure, identity, networking, security, data protection, observability, resilience, and operations. Design secure landing zones and cloud foundations using governance guardrails, account/subscription structures, policy enforcement, centralized logging, network segmentation, and identity-first access controls. Architect hybrid and multi-cloud solutions across Microsoft Azure, AWS, and/or Google Cloud, selecting services and patterns appropriate to client requirements and risk. Embed cybersecurity into architecture decisions using Zero Trust, least privilege, privileged access management, threat modeling, secure configuration, vulnerability management, encryption, and secrets management. Align solutions to compliance frameworks including CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and other client-specific regulatory or contractual requirements. Design for regulated workloads including controlled data boundaries, audit evidence, logging, data residency, secure administration, and separation of duties. Provide architecture oversight during implementation, reviewing detailed designs, infrastructure-as-code, configurations, security controls, and technical deliverables for quality and conformance. Partner with cybersecurity, compliance, engineering, and operations teams to resolve design tradeoffs and ensure solutions are operable, measurable, and audit-ready. Evaluate and rationalize cloud services balancing security, compliance, performance, availability, cost, supportability, and time to value. Develop roadmaps and migration strategies for application modernization, data migration, identity transformation, and cloud security uplift. Create client-ready architecture artifacts including diagrams, decision records, control mappings, implementation plans, risk registers, and executive recommendations. Lead, mentor, and develop a team of architects and engineers while contributing to technical reviews, estimation, solution quality, and continuous improvement. Support pre-sales and solution development by shaping scopes, assumptions, level-of-effort estimates, and technical approaches for complex opportunities. Candidate Qualifications: Bachelor's degree in computer science, engineering, cybersecurity, information systems, or a related field, or equivalent practical experience. 10+ years of progressive technology experience in architecture, engineering, cybersecurity, cloud transformation, or related consulting responsibilities. 7+ years of client-facing consulting or architecture experience leading complex technical discussions and delivering tailored solutions for mid-market or enterprise organizations. 5+ years of hands-on cloud architecture experience designing and implementing production solutions in Azure, AWS, and/or Google Cloud. Demonstrated cybersecurity and compliance experience integrating technical controls and regulatory requirements into cloud architectures and implementation roadmaps. Strong architecture communication skills with the ability to explain risks, tradeoffs, and recommendations to executives, security leaders, auditors, engineers, and business stakeholders. Working knowledge of architecture and security methods such as well-architected frameworks, threat modeling, shared responsibility, Zero Trust, defense-in-depth, and secure-by-design principles. Ability to lead through ambiguity, manage competing requirements, drive decisions, and maintain delivery momentum across multiple stakeholder groups. Experience producing high-quality technical documentation including reference architectures, diagrams, standards, decision records, and implementation guidance. Technical Depth: Deep expertise in at least three of the following areas, with working knowledge of the others: Cloud architecture: Azure, AWS, and/or Google Cloud; landing zones; hybrid connectivity; resiliency; disaster recovery; and cloud operating models. Identity and access: Entra ID and cloud-native IAM; federation; Conditional Access; privileged access; just-in-time administration; workload identities; and secrets management. Cloud security operations: Microsoft Defender XDR, Microsoft Sentinel, Defender for Cloud, and/or comparable AWS or Google Cloud security services; SIEM/SOAR; detection engineering; and threat hunting. Data protection: encryption, key management, data classification, DLP, Microsoft Purview or comparable services, retention, and secure data lifecycle controls. Network security: segmentation, private connectivity, firewalls, secure remote administration, egress control, DNS security, web application protection, and Zero Trust network access. DevSecOps and automation: infrastructure-as-code, policy-as-code, CI/CD security, configuration management, PowerShell, Python, KQL, APIs, and automated compliance validation. Governance and compliance: cloud control frameworks, continuous monitoring, evidence generation, risk management, policy development, and remediation planning. Certifications: At least one of the following active certifications is required or must be obtained within 90 days of hire: Cybersecurity and architecture: CISSP, CCSP, or SABSA certification. Microsoft: AZ-305, AZ-500, or SC-100. AWS: AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty. Google Cloud: Professional Cloud Architect or Professional Cloud Security Engineer. Additional cloud, security, networking, DevOps, or compliance certifications are preferred. Active certifications are required for consideration. Preferred Experience: Architecture for U.S. Government or defense-related environments including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms. Implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks. Application and platform modernization including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns. Cloud financial governance including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices. Technical leadership in consulting delivery including mentoring, quality assurance, reusable intellectual property, and support for proposals or statements of work. The application window is anticipated to close on November 16, 2026 and may be extended as needed. Why work for Aprio: Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm. Perks/Benefits we offer for full-time team members: - Medical, Dental, and Vision Insurance on the first day of employment - Flexible Spending Account and Dependent Care Account - 401k with Profit Sharing - 9+ holidays and discretionary time off structure - Parental Leave – coverage for both primary and secondary caregivers - Tuition Assistance Program and CPA support program with cash incentive upon completion - Discretionary incentive compensation based on firm, group and individual performance - Incentive compensation related to origination of new client sales - Top rated wellness program - Flexible working environment including remote and hybrid options What’s in it for you: - Working with an industry leader : Be part of a high-growth firm that is passionate for what’s next. - An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients. - A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture. - Entrepreneurship : Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally. - Growth opportunities : Grow professionally in an environment that fosters continuous learning and advancement. - Competitive compensation : You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance. EQUAL OPPORTUNITY EMPLOYER Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law. Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.

Requirements

Must-haves

Opportunity to serve as the senior technical authority on high-complexity cloud transformation and cybersecurity engagements.
Exposure to a broad range of client environments, including U.S. government, defense, and regulated industries.
Ability to shape cloud strategy, architecture standards, and security practices that drive lasting organizational change.
Hands-on experience architecting multi-cloud solutions across Azure, AWS, and Google Cloud in real-world, high-stakes environments.
Platform to lead, mentor, and develop architects and engineers within a growing, purpose-driven consulting practice.
Lead client engagements from discovery through delivery, serving as the senior technical consultant and architecture authority.
Facilitate executive briefings, workshops, and architecture sessions that translate business objectives, risk tolerance, and compliance obligations into actionable cloud strategies.
Develop current-state and target-state architectures covering applications, infrastructure, identity, networking, security, data protection, observability, resilience, and operations.
Design secure landing zones and cloud foundations using governance guardrails, account/subscription structures, policy enforcement, centralized logging, network segmentation, and identity-first access controls.
Architect hybrid and multi-cloud solutions across Microsoft Azure, AWS, and/or Google Cloud, selecting services and patterns appropriate to client requirements and risk.
Embed cybersecurity into architecture decisions using Zero Trust, least privilege, privileged access management, threat modeling, secure configuration, vulnerability management, encryption, and secrets management.
Align solutions to compliance frameworks including CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and other client-specific regulatory or contractual requirements.
Design for regulated workloads including controlled data boundaries, audit evidence, logging, data residency, secure administration, and separation of duties.
Provide architecture oversight during implementation, reviewing detailed designs, infrastructure-as-code, configurations, security controls, and technical deliverables for quality and conformance.
Partner with cybersecurity, compliance, engineering, and operations teams to resolve design tradeoffs and ensure solutions are operable, measurable, and audit-ready.
Evaluate and rationalize cloud services balancing security, compliance, performance, availability, cost, supportability, and time to value.
Develop roadmaps and migration strategies for application modernization, data migration, identity transformation, and cloud security uplift.

Nice-to-haves

Additional cloud, security, networking, DevOps, or compliance certifications are preferred. Active certifications are required for consideration.
Architecture for U.S. Government or defense-related environments including Azure Government, Microsoft 365 GCC High, AWS GovCloud (US), or comparable regulated cloud platforms.
Implementing or assessing controls for CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, DoD impact levels, or similar frameworks.
Application and platform modernization including containers, Kubernetes, serverless architectures, APIs, data platforms, and cloud-native integration patterns.
Cloud financial governance including cost allocation, optimization, forecasting, and architecture decisions informed by FinOps practices.
Technical leadership in consulting delivery including mentoring, quality assurance, reusable intellectual property, and support for proposals or statements of work.
The application window is anticipated to close on November 16, 2026 and may be extended as needed.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsci/cdpythonkubernetes

Platform: lever
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Parental Leave

Wellness