Chief Agentic Cloud Architect

EVA is in the business of acquiring enterprise software companies and transforming them into AI-native, profitable, scalable businesses. By prioritising Customer Success, we enable companies with strong product market fit to emerge as market leaders through sustained product innovation and high-quality professional services delivered via our global team. We are a remote-first company and our team is spread across the globe. 

WHY JOIN EVA 

 We offer: 

•  High ownership, flexibility, and impact in a fast-moving environment 

• Opportunity to design cloud governance across a growing portfolio of acquired SaaS products 

• Growth pathways across engineering, platform, operations, and leadership 

• Remote-first flexibility 

ROLE OVERVIEW 

 We are hiring a Chief Agentic Cloud Architect to design, govern, and continuously optimise the AWS cloud estate that underpins EVA’s entire organisation — from internal development tooling to a portfolio of customer-facing SaaS products acquired from multiple companies. 

This is not a single-product infrastructure role. You will define the AWS Landing Zone architecture that governs how every environment — development, QA, non-production, internal IT, and customer-facing SaaS — is structured, secured, and operated. You will set the Service Control Policies that enforce compliance and cost boundaries across the organisation, own the observability and APM platform, author the runbooks that make our L1 operations team effective, and introduce AI agents that monitor, detect, and resolve infrastructure issues before they become incidents. 

WHAT YOU’LL DO 

 1.  Cloud Foundation & Governance 

• Design and own EVA’s AWS Landing Zone — multi-account architecture, OU hierarchy, and account vending standards that bring every acquired product into a consistent, governed baseline 

• Author and enforce Service Control Policies (SCPs) across all environment tiers: development, QA, non-production, internal IT, and customer-facing SaaS — balancing the right level of velocity, security, and cost control at each layer 

• Own the end-to-end infrastructure architecture across the full product portfolio — compute, storage, networking, and database layers — with high availability, fault tolerance, and disaster recovery built in across all production workloads 

• Define Infrastructure-as-Code standards (Terraform or AWS CDK) so all environments are reproducible, auditable, and version-controlled; drive cost optimisation through right-sizing, reserved capacity planning, and agentic usage analysis 

• Own network, application, and data security across the entire cloud estate: VPC segmentation, WAF, IAM least-privilege, secrets management, encryption standards, and service-to-service authentication 

• Maintain a continuous compliance posture across all accounts through automated policy enforcement, drift detection, and audit logging — with product-level account isolation for all customer-facing SaaS deployments 

 3. Observability, APM & Operational Runbooks 

• Build and own the observability stack on AWS using Prometheus and Grafana — metrics, alerting, SLO/SLA dashboards, and deployment health monitoring across all products and environments 

• Author precise, unambiguous runbooks for every recurring operational scenario so the L1 operations team can execute them without interpretation — each with a clear trigger, action sequence, escalation path, and resolution confirmation

 4. Agentic Operations & Proactive Reliability 

• Deploy AI agents for APM monitoring, deployment health checks, anomaly detection, auto-scaling pattern analysis, and cost anomaly alerts — shifting the operations model from reactive incident response to proactive control 

• Own the four reliability pillars across the full cloud estate — availability, security, cost, and performance — as continuously monitored, agent-managed outcomes, and build the feedback loop that returns learnings into the runbook library 

WHAT WE’RE LOOKING FOR 

•  12+ years in cloud infrastructure, platform engineering, SRE, or DevOps 

• AWS Solutions Architect Associate certification is a minimum requirement; Professional is strongly preferred 

• Proven experience designing and operating AWS Landing Zones using AWS Organizations, including OU hierarchy design and Service Control Policy authoring 

• Deep, hands-on expertise across core AWS services: EC2, EKS, RDS, Lambda, S3, CloudFront, Route†53, CloudWatch, IAM, VPC, Transit Gateway, AWS Control Tower, and more 

• Strong command of network security, application security, and data security in a multi-account AWS context 

• Experience managing cloud environments across diverse stages — development, QA, staging, and production — with appropriate governance at each level 

• Experience building and operating observability stacks using Prometheus, Grafana, or equivalent tooling 

• Proven ability to author operational runbooks that non-specialist teams can follow without ambiguity 

• Practical exposure to agentic AI, LLM-based automation, or AI-assisted infrastructure operations 

NICE TO HAVE 

•  Additional AWS certifications: DevOps Engineer Professional, Security Specialty, or Advanced Networking Specialty 

• Experience with Terraform or AWS CDK for Infrastructure-as-Code at scale 

• Background in multi-product SaaS environments, PE-backed technology companies, or post-acquisition platform consolidation 

• Familiarity with FinOps principles and cloud cost governance frameworks 

• Experience with AWS Control Tower or similar Landing Zone automation tooling 

WHY THIS ROLE MATTERS 

• You are not managing a single product’s infrastructure. 
• You are designing and governing the cloud foundation that every EVA product runs on — across every environment, every acquired company, and every team — and building the intelligent operations layer that keeps it all reliable, secure, and cost-efficient without waiting for an incident to tell you something is wrong. 
• This is a career-defining role for cloud architects who want to operate at organisational scale and define what agentic cloud operations looks like in practice.