Sr. Cloud Platform Architect

Company Overview

KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop smartphone wearable device voice-controlled gadget flexible screen VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles integrated circuits packaging printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists engineers data scientists and problem-solvers work together with the worlds leading technology providers to accelerate the delivery of tomorrows electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Group/Division

The Information Technology (IT) group at KLA is involved in every aspect of the global business. ITs mission is to enable business growth and productivity by connecting people process and technology. It focuses not only on enhancing the technology that enables our business to thrive but also on how employees use and are empowered by technology. This integrated approach to customer service creativity and technological excellence enables employee productivity business analytics and process excellence.

Job Description/Preferred Qualifications

The Cloud Architect will be responsible for designing implementing securing and governing cloud based solutions across multiple cloud platforms including AWS Microsoft Azure and Google Cloud Platform (GCP). This role requires a strong understanding of cloud security architecture identity and access management networking and secure by design architecture principles in addition to IaaS and PaaS best practices.

Responsibilities:

• Design and architect scalable highly available resilient and secure cloud solutions leveraging IaaS and PaaS services across AWS Azure and Google Cloud Platform (GCP).

• Lead cloud migration initiatives including rehosting replatforming refactoring and rearchitecting legacy and onpremises workloads with a strong emphasis on security posture improvement and risk reduction.

• Drive application and infrastructure modernization programs to improve scalability performance security and operational efficiency.

• Partner with engineering platform and security teams to define cloudnative reference architectures security guardrails and modernization roadmaps.

• Optimize cloud infrastructure for performance availability reliability security hardening and cost efficiency.

• Establish and manage cloud security architectures and governance frameworks aligned with industry standards and internal security policies.

• Design and enforce identityfirst security including IAM strategies leastprivilege access controls rolebased access identity federation and secrets management.

• Design and implement secure cloud networking architectures including VPN Direct Connect ExpressRoute and Cloud Interconnect.

• Configure and enforce network segmentation microsegmentation zerotrust architectures and advanced network security controls.

• Secure containers Kubernetes serverless and microservices environments including image scanning runtime protection and policy enforcement.

• Implement Infrastructure as Code (IaC) using Terraform AWS CloudFormation and Azure ARM/Bicep templates with builtin security policy and compliance controls.

• Design and evolve DevSecOps CI/CD pipelines integrating security scanning policy enforcement and automated compliance validation.

• Define and implement cloud security observability including logging monitoring alerting and incident response integration.

• Evaluate emerging cloud and security technologies driving continuous improvement of platform security and resilience.

• Develop document and present architecture diagrams security models threat assessments technical documentation roadmaps and executivelevel presentations.

• Define and operate cloud operating models including security governance FinOps tagging standards resource governance and operational excellence frameworks

Minimum Qualifications

• Bachelors level degree in Computer Science Computer Engineering or related field with eight (8) years of related experience.

• Seven (7) years of handson cloud architecture or engineering experience including ownership of secure production environments.

• Proficient in at least one major cloud platform such as Microsoft Azure AWS or GCP with strong crosscloud security fundamentals.

• Indepth understanding of cloud networking cloud security containers Kubernetes serverless technologies and microservices.

• Confirmed experience with cloud security controls including IAM encryption key management network security and zerotrust principles.

• Extensive knowledge of cloud governance monitoring observability FinOps and cost management.

• Strong understanding of compliance and regulatory frameworks (e.g. NIST ISO SOC CIS PCI or similar).

• Experience embedding security into architecture design IaC and CI/CD pipelines (DevSecOps).

• Exceptional communication leadership and customermanagement skills with the ability to influence engineering security and executive stakeholders.

Base Pay Range: $111100.00 - $188900.00 Annually

Primary Location: USA-MI-Ann Arbor-KLA

KLAs total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical dental vision life and other voluntary benefits 401(K) including company matching employee stock purchase program (ESPP) student debt assistance tuition reimbursement program development and career growth opportunities and programs financial planning benefits wellness benefits including an employee assistance program (EAP) paid time off and paid company holidays and family care and bonding leave.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role level and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors including state minimum pay wage rates location job-related skills experience and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable your recruiter can share more about the specific pay range for your preferred location during the hiring process.

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process to perform essential job functions and to receive other benefits and privileges of employment. Please contact us at or at 1- to request accommodation.

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview to become an employee or for equipment. Further KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLAs Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication an interview an offer of employment or that an employee is not legitimate please send an email to to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.