Cloud Architect/Engineer – Technology Consulting (Amman)

About the role

As a Cloud Architect/Engineer in EY's Technology Consulting practice, you will work with multidisciplinary teams to design, build, and operate secure, scalable cloud platforms for clients across sectors. The role can focus on architecture or engineering depending on your experience and interview performance.

Key responsibilities

• Lead or support architectural design sessions and define target‑state cloud platforms using Azure or AWS Cloud Adoption Framework and Well‑Architected principles.
• Define and publish landing‑zone standards covering identity, access management, networking, governance, tagging, logging, resilience and observability.
• Design account structures and onboarding standards for Azure Management Groups, Subscriptions, AWS Organizations, OUs and Accounts.
• Implement Azure landing zones and account onboarding using Terraform and standard checklists.
• Deploy network foundations such as virtual networks, Virtual WAN, DNS, ExpressRoute, VPN, Private Link and firewall configurations.
• Configure and baseline Kubernetes clusters (AKS/EKS), container registries, Docker, Helm, add‑ons and operational readiness checks.
• Apply governance guardrails with Azure Policy, AWS Service Control Policies, resource tagging, diagnostics and logging.
• Implement identity and access patterns including RBAC and least‑privilege controls.

Required profile

• Minimum 3 + years of relevant cloud experience.
• Experience with Azure and/or AWS cloud platforms.
• Ability to work on advisory, architecture, engineering and implementation engagements.
• Strong stakeholder exposure and communication skills.

Required skills

• Azure Cloud (Landing Zones, Management Groups, Subscriptions)
• AWS Cloud (Organizations, OUs, Accounts)
• Infrastructure as Code – Terraform
• Kubernetes – AKS, EKS
• Docker, Helm
• Network services – Virtual WAN, ExpressRoute, VPN, Private Link, firewalls
• Identity & Access Management – RBAC, least‑privilege models
• Governance – Azure Policy, AWS Service Control Policies, tagging, logging