---

name: cloud-architect description: | Guides cloud solution architecture—Well-Architected alignment, landing zone and org design, workload placement and service selection, network and security segmentation, hybrid and multi-region patterns, migration roadmaps (7Rs), cost architecture, and cloud ADRs with diagrams for stakeholder review. Use when choosing cloud platforms and reference architectures, designing account guardrails, comparing managed vs self-managed services, planning cloud migration or exit, or running cloud architecture review—not for hands-on resource configuration (cloud-engineer), Terraform module implementation (infrastructure-engineer), CI/CD delivery (devops), K8s cluster ops (cluster-deployment-engineer), IDP product strategy (platform-engineer), enterprise-wide non-cloud system ADRs (senior-system-architecture), or applied AI solution design (applied-ai-architect-commercial-enterprise).

Cloud Architect

When to Use

• Define cloud strategy — single vs multi-cloud, regions, sovereignty, exit criteria
• Design landing zones — OUs, accounts, guardrails, shared services
• Map workloads to service models — serverless, containers, VMs, SaaS
• Produce reference architectures — web app, data platform, event-driven, hybrid
• Run Well-Architected reviews (security, reliability, performance, cost, ops, sustainability)
• Plan migration — assess, 7Rs, waves, dependency order, rollback
• Architect network and security — segmentation, private connectivity, zero-trust hooks
• Model cost — TCO, reservation strategy, chargeback tags at design time
• Author cloud ADRs and review decks for engineering and security sign-off

When NOT to Use

• Provision RDS, fix IAM errors, tune autoscaling → cloud-engineer
• Author Terraform modules and pipeline YAML → infrastructure-engineer, devops
• Helm releases and cluster upgrades → cluster-deployment-engineer
• Developer portal and golden-path roadmap → platform-engineer
• Cross-domain integration and strangler ADRs (not cloud-specific) → senior-system-architecture
• Data mesh, lakehouse, warehouse modeling → data-architect
• Release cutover runbooks → deployment-strategist
• Security control program and GRC evidence → cybersecurity, compliance-engineer
• Implement cloud guardrails, CSPM, IAM/network security controls → cloud-security-engineer
• LLM/RAG/agent architecture → applied-ai-architect-commercial-enterprise, ai-engineer
• Program RAID and milestones → technical-program-manager
• Physical DC design → data-center-design-execution-lead
• Multi-BU landing zones, CCoE, EA, regulated enterprise program → enterprise-cloud-architect
• Multi-year cloud strategy, migration portfolio, EA governance → vp-of-cloud
• Multi-year TCO/NPV and option economics for ADRs → cloud-economist
• Customer RFP, deal integration architecture, PoC scope → solutions-architect

Related skills

Need	Skill
VP cloud program and migration portfolio	vp-of-cloud
Enterprise-scale cloud governance	enterprise-cloud-architect
Implement cloud resources	cloud-engineer
IaC modules and delivery patterns	infrastructure-engineer
CI/CD and GitOps	devops
Kubernetes platform operations	cluster-deployment-engineer
Internal developer platform	platform-engineer
Enterprise system architecture	senior-system-architecture
Data platform architecture	data-architect
Cloud security guardrails and posture	cloud-security-engineer
Corporate security program and tooling	information-security-engineer
Cloud TCO and option economics	cloud-economist
FinOps accounting	compute-accounting-manager
Hybrid / DC connectivity	data-center-design-execution-lead
AI workload on cloud	applied-ai-architect-commercial-enterprise
Customer deal solution and RFP technical design	solutions-architect

Core Workflows

1. Architecture principles and NFRs

Pillars, constraints, quality attributes.

See references/cloud_architecture_principles.md.

2. Landing zone and organization

Accounts, guardrails, shared services.

See references/landing_zone_org_design.md.

3. Workload placement and services

Compute model and vendor selection.

See references/workload_placement_service_selection.md.

4. Network and security architecture

Segmentation, connectivity, controls.

See references/network_security_architecture.md.

5. Migration and hybrid

Roadmaps, hybrid patterns, exit.

See references/migration_and_hybrid.md.

6. Deliverables and review

Diagrams, ADRs, review checklist.

See references/architecture_deliverables.md.

Outputs

• Context diagram — users, systems, external dependencies
• Target architecture — logical and physical (cloud services labeled)
• ADR set — decisions, options, consequences
• Migration wave plan — scope, risks, prerequisites
• WAF findings — prioritized remediation backlog
• Cost model — order-of-magnitude TCO drivers

Principles

• Design for operability — if it cannot be observed and owned, it is not ready
• Prefer managed until a clear constraint requires self-managed
• Explicit non-goals — scope control prevents architecture creep
• Reversibility — call out one-way doors; phase commits
• Security and compliance early — not a late gate