Cloud Architect

Contract: Permanent / CDI

Start date: ASAP

Salary: 68k€ - 85k€ brut annuel

Languages: French (primary working language), professional English

Remote: 100%

ABOUT OFELIA

Ofelia (formerly Bonitasoft) is an AI-native orchestration platform that turns every business process into a fluid, conversational experience, driven by intelligent, governed agents. We help Business and IT teams automate what matters, without complexity, without friction.

ABOUT THE ROLE

We are building our cloud offering to a full SaaS model, and building a new Architecture team to lead that shift.

You'll partner closely with our Head of Architecture on the software-and-cloud vision, and work day to day with the Cloud/DevOps and Platform teams. You'll have real ownership over how we build, secure, and scale the platform as it grows from where it is today toward a multi-tenant, multi-customer product.

HOW WE WORK : ARCHITECTURE BUILT TOGETHER

This role comes with real autonomy, on purpose. Our Head of Architecture will be closely involved at the start, introducing you to the teams and setting direction, and will then step back to let you drive your own scope. We're not looking for someone to manage closely; we're looking for someone who can take a blank page and own it, and who knows when to loop others in.

The Architecture team itself is still taking shape, so a lot of how we work will be built together with you. In practice, that means direct, frequent exchanges with the teams below rather than layers of process, closer to mentorship and architecture review than top-down direction:

• Head of Architecture (hiring manager) : software & AI architecture, partnering for a unified product vision
• Cloud/DevOps team : daily collaboration and mentoring
• Platform team : cross-cutting architecture topics
• Information Security Officer : validating cloud security choices

THE DAY-TO-DAY JOB

Day to day, you'll own the cloud side of that transition end to end:

• Design and evolve the platform's multi-tenant cloud architecture (tenant isolation, data models, onboarding flows), robust, scalable, and secure, with AWS as the primary provider and a second cloud provider
• Define and promote architecture best practices: high availability, resilience, cost optimization (FinOps)
• Lead containerization and orchestration with Kubernetes (cluster design, networking, security, observability, lifecycle management)
• Industrialize provisioning and deployments through Infrastructure as Code (Terraform) and CI/CD pipelines (GitOps)
• Integrate and operationalize generative AI services, notably Amazon Bedrock (model selection, RAG, AI usage governance)
• Own the cloud security architecture, in partnership with our Information Security Officer, who covers ISO 27001/SOC 2 compliance: IAM, encryption, network segmentation, cluster hardening, threat modeling
• Define operational resilience practices: disaster recovery (RTO/RPO), backup strategy, SLA/SLO
• Mentor and upskill the DevOps and engineering teams
• Maintain active technology watch and challenge existing architecture choices

THE PERSON WE'RE LOOKING FOR

Experience & certifications:

• Senior experience in cloud architecture and infrastructure, including several years in critical production environments
• Hands-on experience taking a SaaS product to production from its early stages
• AWS certification required (Solutions Architect Professional preferred)

Technical skills:

• Deep Kubernetes expertise: cluster architecture, Helm, operators, service mesh, security (RBAC, network policies, admission controllers)
• Strong automation background: Terraform (essential), Ansible, CI/CD pipelines (GitLab CI, GitHub Actions, ArgoCD)
• Multi-tenant architecture: tenant isolation, data modeling, onboarding flows
• Operational resilience: disaster recovery (RTO/RPO), backup strategy, SLA/SLO definition
• Data layer: managed databases, storage, and data migration
• Cloud-native security: IAM, secrets management, encryption, audit practices (in partnership with our security team on ISO 27001, SOC 2, GDPR)
• Solid grasp of microservices architecture, networking (VPC, DNS, load balancing), and observability (Prometheus, Grafana, CloudWatch...)
• Cost-conscious cloud engineering (FinOps): cost optimization and budget governance
• Comfort integrating generative AI services in production (e.g., Amazon Bedrock or equivalent). Deep Bedrock experience is a strong plus
• Daily, hands-on use of AI-assisted coding tools

Nice-to-have:

• Certification on a second cloud provider (Azure, GCP)
• Familiarity with EU data residency/sovereignty requirements (relevant given GDPR compliance and sovereign cloud options)
• AI-assisted intelligent monitoring and alerting