The Cloud Architect will guide the technical configuration and integration of platforms across the hybrid landscape—including connectivity, identity and trust, certificates, provisioning, monitoring, and cross-platform integration—while shepherding multiple system integrators (SIs) and internal teams. This position emphasizes technical leadership and execution, requiring the architect to lead by influence across teams to implement best practices, ensure robustness and security, and deliver a successful cloud foundation for the SAP S/4HANA transformation.
AdvantagesHigh-Impact Architecture Ownership: Lead the end-to-end design of a hybrid cloud landscape supporting a critical, enterprise-scale S/4HANA transformation.
Advanced Technology Stack: Work extensively across AWS core infrastructure and a robust suite of SAP cloud platform tools (SAP BTP, IAS, IPS, Integration Suite, Cloud ALM, Datasphere, and Joule).
Strategic Leadership Scope: Drive technical alignment and govern the delivery of multiple external System Integrators (SIs) and internal cross-functional engineering teams.
Premier Corporate Environment: Based at 5th Avenue Place in Calgary under a structured CWC contract framework.
Top 3 Outcomes
Seamless Hybrid Cloud Integration: Establish secure, high-performance connectivity across the SAP S/4HANA RISE private cloud environment, the broader SAP cloud ecosystem, our client's existing AWS cloud infrastructure, and integrated enterprise platforms.
On-Time Architecture Delivery: Complete detailed hybrid cloud and SAP ecosystem architecture designs—including network, connectivity, identity, integration, and platform boundary patterns—on schedule to accelerate environment builds.
Reliable & Secure Cloud Platform Foundation: Define robust platform architecture across AWS, SAP-managed cloud services, and connected platforms to ensure resiliency, observability, and zero critical environment-related failures through testing and go-live.
ResponsibilitiesKey Interfaces & Purpose
Program Solution & Integration Architects: Partner closely to align the hybrid cloud and SAP cloud platform design with the overall solution architecture, ensuring support for all SAP and non-SAP integrations.
Security Architect: Incorporate rigid security and compliance controls into the cloud architecture, including identity and trust design, network security, encryption, and certificate management.
Enterprise Architecture & Governance: Ensure all hybrid cloud and SAP cloud designs comply fully with enterprise standards, documenting all key decisions through formal governance processes.
Delivery & Oversight Teams: Own the end-to-end delivery of cloud and SAP platform architecture, breaking designs down into implementable work packages across network builds, identity, and integration dependencies.
Infrastructure & Networking Teams: Collaborate on AWS Transit Gateway, Direct Connect, VPN, VPC, firewall, DNS, and certificate configurations to support the SAP RISE boundary and connected workloads.
SAP, AWS, & Strategic Platform Vendors: Define and govern the technical boundary between SAP RISE (SAP-managed AWS), our client's managed AWS environments, and the broader cloud ecosystem while enforcing the shared responsibility model.
Responsibilities
1. Hybrid Cloud Architecture Design & Documentation
Own the end-to-end design of the hybrid AWS and SAP cloud architecture, including VPC topology, subnet design, routing, firewall rules, and security groups.
Develop comprehensive architecture diagrams illustrating how S/4HANA, BTP, IAS/IPS, and Integration Suite interface with AWS and external SaaS platforms.
Plan and oversee architecture patterns for redundancy, failover, disaster recovery, observability, and secure integration across the landscape.
Direct and enforce the delivery of cloud architecture across SIs and internal teams, rejecting non-compliant designs or builds.
2. Governance, Connectivity & Security
Architect robust connectivity patterns linking SAP RISE, SAP cloud platforms, client-managed AWS environments, and enterprise services using Transit Gateway, Direct Connect, VPN, and private connectivity patterns.
Work with the Security Architect to embed encryption, certificate management, network segmentation, identity federation, and secure communications into the core design. Prepare and present hybrid cloud and SAP platform design proposals to architecture review boards, documenting Architecture Decision Records (ADRs) and trade-off analyses.
3. Collaboration & Continuous Improvement
Coordinate technical interdependencies across diverse teams, including networking, security, infrastructure, SAP Basis, and data/integration streams.
Encourage the use of automation and Infrastructure-as-Code (IaC) for environment provisioning to increase consistency.
Continuously optimize cloud costs, performance, and scalability by incorporating industry best practices and lessons learned from similar large-scale cloud transformations.
Key Artifacts & Deliverables
Hybrid Cloud Architecture Blueprints & Diagrams: Detailed documents capturing the integrated AWS and SAP cloud environment designs, VPC layouts, and security overlays. Cloud Integration Design & Configuration Documents: Technical specifications detailing DNS delegation, certificate trust setups, SSO integration, BTP connectivity, and private data paths.
Infrastructure Build & Cutover Runbooks: Step-by-step implementation plans for provisioning AWS infrastructure and enabling connectivity to guide SIs through build and transition phases.
Architecture Decision Records (ADRs): Formal logs capturing design choices, trade-offs, sizing justifications, and disaster recovery strategies for governance endorsement. Operational Handover Documentation: Comprehensive post-build support documentation, including configuration baselines, troubleshooting guides, and logging setups for long-term operations.
QualificationsEducation & Experience
Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
Certifications: AWS Certified Solutions Architect – Professional is strongly preferred; SAP cloud, integration, or security certifications are highly beneficial.
Cloud Architecture Tenure: 8+ years of extensive experience designing large-scale AWS and hybrid cloud environments.
Enterprise ERP Awareness: Proven experience supporting enterprise-scale IT transformations; strong conceptual understanding of SAP S/4HANA architecture, RISE with SAP deployment models, and shared responsibility boundaries.
Technical Skillset MatrixAWS Core Infrastructure: Deep expertise in AWS networking, cloud security, identity structures, encryption protocols, certificates, and observability dashboards.
SAP Cloud Tools: Strong familiarity with SAP BTP, SAP identity and provisioning services (IAS, IPS, IAG bridge), Integration Suite, Cloud ALM, Datasphere, Ariba, Signavio, SAP Build, and Joule.
Platform & Compute Engineering: Experience designing and supporting workloads running on Windows Server, SQL Server, Red Hat Enterprise Linux (RHEL), and SUSE Linux within AWS environments.
Architecture Visualization: Virtuosic diagramming skills, with a proven ability to produce clear, technically precise architecture artifacts that provide actionable guidance to build teams.
SummaryOur Client is seeking a seasoned SAP Technical Cloud Architect to join a large-scale SAP modernization program migrating from SAP ECC to SAP S/4HANA RISE Private Cloud Edition. Operating as a senior individual contributor, this role focuses on deep AWS, hybrid-cloud, and SAP cloud design. The Cloud Architect will design and guide the detailed cloud infrastructure and network architecture that seamlessly integrates SAP S/4HANA and SAP Business Technology Platform (BTP) solutions within SAP’s RISE private cloud (hosted on AWS) with our client's own AWS environment and a portfolio of integrated SaaS applications.
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to
accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
