Cloud Platform Architect

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Cloud & Infrastructure Engineering position at the Director level, which is part of the job family responsible for managing and optimizing technical infrastructure and ensuring the seamless operation of IT systems to support business needs effectively. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. PEArch is seeking a Cloud Platform Engineering Architect to support the ETRADE Cloud program. The role will contribute to the design and evolution of secure, resilient, scalable, automated, and well-governed platform capabilities, with primary expertise in Google Cloud Platform (GCP). The architect will translate application, business, security, infrastructure, and operational requirements into reusable platform architecture patterns aligned with enterprise architecture, engineering, risk, and regulatory standards. The architect will work across platform engineering, application development, cloud infrastructure, cybersecurity, networking, operations, risk, and governance teams. The role will shape target-state and transitional architectures, establish reusable platform patterns, support proofs of concept, and guide engineering teams through implementation and production readiness. The primary focus is enabling ETRADE workloads on GCP while supporting integration with existing enterprise environments and, where applicable, AWS services. What you’ll do in the role: Own and contribute to end-to-end platform engineering architecture for ETRADE cloud capabilities, from conceptual design through implementation and production readiness. Define target-state, transitional, and migration architectures for applications moving from existing environments to secure cloud-native platforms. Develop reference architectures, architecture principles, reusable patterns, standards, guardrails, and decision records for platform services. Design cloud landing-zone capabilities covering organization and project structures, networking, identity, security controls, logging, monitoring, policy enforcement, and operational governance. Create platform architecture patterns for Kubernetes, workload identity, APIs, event-driven services, data services, observability, resiliency, and automation. Design and guide GCP capabilities using GKE, Compute Engine, Cloud Storage, Cloud SQL, Pub/Sub, Cloud Load Balancing, Cloud DNS, Secret Manager, Cloud KMS, and Cloud Monitoring. Define platform product capabilities and paved-road patterns that enable secure self-service provisioning, consistent developer experience, and repeatable workload onboarding. Establish architecture for infrastructure as code, CI/CD, GitOps, policy as code, configuration management, automated testing, vulnerability scanning, artifact governance, and environment promotion. Design infrastructure architecture covering virtual networks, subnets, routing, firewalls, private connectivity, ingress, egress, DNS, proxies, load balancing, certificates, secrets, and key management. Define secure connectivity patterns across GCP, enterprise data centers, SaaS providers, external services, and AWS where required. Guide GKE and Kubernetes architecture including private clusters, workload identity, secrets management, ingress, autoscaling, network policy, cluster security, resiliency, upgrades, and lifecycle management. Define identity and access-management patterns for federation, service accounts, role-based access, workload identity, privileged access, and least-privilege controls. Define high-availability, disaster-recovery, backup, restoration, capacity, performance, observability, and production-support architecture patterns. Lead and participate in architecture reviews, technical evaluations, risk assessments, and POCs; document decisions, trade-offs, dependencies, risks, and remediation actions. Create and maintain context, logical, physical, deployment, security, network, integration, sequence, and data-flow architecture artifacts. Partner with product, application, engineering, security, infrastructure, risk, governance, and operations stakeholders to drive architecture decisions through implementation and closure. Mentor engineering teams on platform architecture standards, pattern adoption, non-functional requirements, and production-readiness expectations.   Architecture Focus Area: GCP Platform Architecture - Organization and project structure; landing zones; IAM; shared VPC; organization policies; GKE; compute; storage; databases; messaging; security; observability. Platform Engineering Architecture - Platform-as-a-product; self-service provisioning; reusable services and templates; paved-road patterns; developer experience; service lifecycle; platform APIs; onboarding and adoption. Infrastructure Architecture - Compute; storage; networking; routing; DNS; firewalls; load balancing; proxies; private connectivity; ingress and egress; certificates; secrets; key management. Cloud-Native Engineering - Kubernetes and GKE; CI/CD; GitOps; infrastructure as code; policy as code; configuration automation; software supply chain; developer enablement. Cloud Security & IAM - Workforce and workload identity; federation; service accounts; least privilege; encryption; secrets management; segmentation; auditability; security monitoring. Resilience & Operations - High availability; multi-zone and multi-region design; disaster recovery; backup; observability; incident readiness; SRE practices; production support. Application Modernization - Migration strategies; containerization; microservices; API enablement; event-driven patterns; data integration; legacy-platform interoperability. Governance & Controls - Architecture governance; cloud guardrails; standards; risk tracking; regulatory alignment; cost controls; compliance evidence; production-readiness reviews.   What you’ll bring to the role: Professional experience in cloud engineering, platform engineering, infrastructure engineering, solution architecture, or a related technical discipline. Hands-on knowledge of Google Cloud Platform, including organizations, folders, projects, billing structures, IAM, service accounts, organization policies, shared VPCs, and landing zones. Experience with GCP compute, container, storage, networking, security, messaging, database, monitoring, and automation services. Working knowledge of Google Kubernetes Engine and Kubernetes, including private clusters, node pools, workload identity, network policies, ingress, autoscaling, upgrades, security, and resiliency. Working knowledge of GCP networking, including VPCs, subnets, routing, firewall policies, Private Service Connect, private service access, Cloud NAT, Cloud DNS, load balancing, VPN, and dedicated connectivity. Strong infrastructure foundation across compute, storage, networking, DNS, load balancing, proxies, firewalls, certificates, secrets, and key management. Experience with Terraform or comparable infrastructure-as-code technologies, CI/CD, GitOps, policy as code, automated testing, vulnerability scanning, and release governance. Understanding of platform engineering principles including platform-as-a-product, self-service capabilities, reusable templates, paved roads, developer experience, automation, and platform lifecycle management. Familiarity with cloud migration and modernization patterns including rehosting, replatforming, refactoring, containerization, decomposition, and phased migration. Familiarity with APIs, API gateways, microservices, event-driven architectur