Cloud Architect - bpost
Description
bpost is modernizing its technology landscape and cloud footprint across AWS, Azure and Azure VMware Solution. The Cloud Modernization Architect will assess the existing estate and define portable modernization roadmaps. The role focuses on secure, cost-efficient architectures that reduce VMware dependency and technical debt. It also supports improved resiliency, agility and resource-to-application tagging.
The architect will lead migrations from AVS-hosted VMware infrastructure and re-architect legacy or monolithic workloads toward containers, serverless and managed services. The role owns and evolves AWS and Azure architecture standards and reference designs, including Golden AMI practices. It defines Infrastructure-as-Code and CI/CD standards for repeatable modernization at scale. Well-Architected Framework findings will be translated into a prioritized modernization backlog.
Security and cost optimization are embedded throughout the modernization program. The architect will work closely with CloudOps, SecOps, Application and Security teams on vulnerability management, WAF, PKI, IAM governance and compliance checks. The role will drive rightsizing, reserved or savings plans and FinOps practices while reporting progress to stakeholders. It will also identify automation and self-service opportunities that reduce manual toil.
Top Reasons to Apply
Lead cloud modernization
Shape cloud standards
Drive secure migrations
Optimize cloud costs
Expand automation scale
Detailed Responsibilities and Skills
Additional Responsibilities
- Update modernization stakeholders
- Partner security team
- Embed compliance checks
- Define IaC standards
- Define CI/CD standards
- Conduct WAF reviews
- Prioritize modernization backlog
- Provide architectural guidance
- Champion automation opportunities
- Reduce manual toil
General skills
- 10+ years of experience in cloud engineering/architecture roles.
- 4+ years focused on AWS or Azure.
- Hands-on cloud migration and modernization delivery experience.
- Demonstrated experience leading application and infrastructure modernization.
- Demonstrated cloud cost optimization experience including rightsizing, reserved capacity and FinOps practices.
- Dutch and French spoken and written at business level.
- Master's and/or Bachelor's degree in Computer Science, Information Systems, Engineering or a related field, or equivalent experience.
- Preferred: cloud architecture/security certification such as Solutions Architect Associate/Professional, Security Specialty or equivalent.
- Preferred: familiarity with postal, logistics or similarly regulated large-scale enterprise environments.
- Preferred: knowledge of GDPR or other EU regulatory/compliance considerations.
- Preferred assessment criterion: previous delivery of the same type of assignment/project.
- Preferred assessment criterion: previous experience with public-sector customers.
- Preferred assessment criterion: previous experience at bpost enabling rapid ramp-up.
- Preferred assessment criterion: cultural fit with bpost's mission and vision.
Technical skills
- Hands-on VMware virtualization experience with vSphere and NSX-T.
- Hands-on Azure VMware Solution experience, including planning and executing migrations off AVS.
- Deep expertise in Azure and/or AWS core services and modernization-relevant services.
- Strong Infrastructure-as-Code experience using Terraform or similar.
- Strong CI/CD pipeline experience supporting automated, repeatable deployments.
- Solid cloud security knowledge covering vulnerability management, WAF, PKI and IAM governance.
- Ability to apply security practices to modernized and containerized workloads.
- Preferred: hands-on container orchestration experience.
- Preferred: event-driven architecture experience.
- Preferred: large-scale VMware Cloud, Azure VMware Solution or similar VM-to-cloud migration experience.
Tools
- Azure VMware Solution (AVS).
- VMware vSphere and NSX-T.
- Azure Migrate, HCX or equivalent migration tooling.
- AWS and Azure core and modernization services.
- Terraform or similar Infrastructure-as-Code tooling.
- CI/CD pipelines.
- WAF, PKI and IAM governance technologies.
- Preferred: SNS, SQS and Kafka.
- Preferred: container orchestration tooling.