Principal Cloud Architect – AWS & SAP (S/4HANA RISE)
-
Pay Rate: $102.78/hour, depending on experience
-
Contract Length: 9 Months
- Location: Calgary, Alberta
Raise is currently hiring a Principal Cloud Architect – AWS & SAP (S/4HANA RISE) on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client, is one of North America's leading energy infrastructure companies with operations in natural gas, oil and power industries throughout Canada, the United States, and Mexico
Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.
Description
The Principal Cloud Architect – AWS & SAP in this role will join our clients large-scale SAP modernization program migrating from SAP ECC to SAP S/4HANA RISE Private Cloud Edition. In this individual contributor role, you will In this individual contributor role, you will focus on deep AWS, hybrid-cloud, and SAP cloud design. You will design and guide the detailed cloud infrastructure and network architecture that seamlessly integrates SAP S/4HANA and SAP Business Technology Platform (BTP) solutions in SAP’s RISE private cloud (hosted on AWS) with ’s own AWS environment and our portfolio of integrated SaaS applications, ensuring a secure, high-performance hybrid landscape.
The role demands extensive expertise in AWS infrastructure, networking, hybrid connectivity, and SAP cloud platform architecture and technical enablement. This includes hands-on architectural familiarity with SAP BTP, IAS, IPS, IAG bridge, Integration Suite, Cloud ALM, Datasphere, Ariba, Signavio, SAP Build, Joule, GRC, and related access, logging, and client services.
As the Cloud Architect, you must be able to guide the technical configuration and integration of these platforms across the hybrid landscape—including connectivity, identity and trust, certificates, provisioning, monitoring, and cross-platform integration—while shepherding multiple System Integrators (SIs) and internal teams. This role emphasizes technical leadership and execution: you will lead by influence across teams to implement best practices, ensure robustness and security, and deliver a successful cloud foundation for the SAP S/4HANA transformation.
Key Outcomes
-
Seamless Hybrid Cloud Integration: Established secure, high-performance connectivity across the SAP S/4HANA RISE private cloud environment, the broader SAP cloud ecosystem, our existing AWS cloud infrastructure, and integrated enterprise platforms.
-
On-Time Architecture Delivery: Detailed hybrid cloud and SAP ecosystem architecture designs—including network, connectivity, identity, integration, and platform boundary patterns—are delivered and approved on schedule, providing clear guidance for environment build and accelerating project timelines.
-
Reliable & Secure Cloud Platform Foundation: Robust platform architecture is defined across AWS, SAP-managed cloud services, and connected enterprise platforms to ensure resiliency, security, observability, and zero critical environment-related failures through testing and go-live.
-
Core Execution Mandate: Translate architecture into executable designs, Define cloud and SAP work packages and Enable build-ready SI execution.
-
Key Interfaces & Stakeholder Collaboration
-
Program Solution & Integration Architects: Work closely with solution, business, cloud, SAP, and integration architects to align the hybrid cloud and SAP cloud platform design with the overall solution architecture. Ensure the environment supports SAP and non-SAP integrations, identity patterns, technical platform dependencies, and cross-system connectivity requirements.
-
Security Architect: Partner with the Security Architect to incorporate security and compliance controls into the cloud architecture. This includes identity and trust design, network security, encryption, certificate management, provisioning patterns, logging, and secure integration across AWS, SAP cloud platforms, and connected enterprise services.
-
Enterprise Architecture & Governance: Ensure hybrid cloud and SAP cloud designs comply with corporate enterprise standards, with all key architecture decisions formally approved, documented, and traceable through governance processes.
-
Infrastructure & Networking Teams: Coordinate with internal network and cloud platform teams to implement connectivity and infrastructure changes. Collaborate on AWS Transit Gateway, Direct Connect, VPN, VPC, firewall, DNS, and certificate configurations, ensuring these patterns support the SAP RISE boundary, SAP cloud platforms, connected SaaS services, and related enterprise workloads.
-
SAP, AWS, and Strategic Platform Vendors: Define and govern the technical boundary between SAP RISE (SAP-managed AWS), TC-managed AWS environments, and the broader SAP cloud ecosystem. Clarify and enforce the shared responsibility model across SAP, AWS, system integrators, internal teams, and strategic SaaS or platform providers. Ensure no gaps exist in connectivity, trust boundaries, identity, monitoring, or incident ownership.
Responsibilities
-
1. Requirements, Process & Solution Definition
-
Design & Document Hybrid Cloud Architecture: Own the end-to-end design of the hybrid AWS and SAP cloud architecture supporting the SAP S/4HANA RISE private cloud environment and broader SAP cloud ecosystem. This includes VPC topology, subnet design, routing and firewall rules, security groups, and integration of SAP-managed cloud services with TC-managed AWS and connected enterprise platforms. Develop comprehensive architecture diagrams and connectivity designs illustrating how S/4HANA, BTP, IAS/IPS, Integration Suite, and related SAP systems interface with AWS, SaaS platforms, and enterprise systems.
-
Architect Secure, Scalable Infrastructure: Ensure the hybrid AWS and SAP cloud environment adheres to best practices for security, reliability, scalability, and resiliency. Plan and oversee architecture patterns for redundancy, failover, disaster recovery, observability, and secure integration across AWS, SAP-managed cloud services, and connected enterprise platforms. Work with the Security Architect to incorporate enterprise controls such as identity and trust design, encryption, certificate management, network segmentation, and secure communications into the overall platform architecture.
-
Network Connectivity & Integration: Architect robust connectivity and integration patterns linking SAP RISE, SAP cloud platforms, TC-managed AWS environments, and connected enterprise services. Define appropriate connectivity, trust, and integration approaches—including Transit Gateway, Direct Connect, VPN, DNS, certificate strategy, identity federation, and private connectivity patterns—to enable secure, low-latency interaction across the hybrid landscape.
-
Governance & Decision Making: Contribute to architecture governance by preparing and presenting hybrid cloud and SAP platform design proposals to architecture review boards. Ensure compliance with enterprise technology standards, clarify ownership boundaries across SAP, AWS, vendors, and internal teams, and document key decisions (Architecture Decision Records, trade-off analyses) for accountability and future reference.
-
Collaboration & Continuous Improvement: Work across diverse teams (network, security, infrastructure, SAP Basis, data/integration, etc.) to coordinate technical interdependencies. Encourage the use of automation and Infrastructure-as-Code (IaC) for environment provisioning to increase consistency. Continuously seek ways to optimize cloud costs, performance, and scalability; incorporate industry best practices and lessons learned from similar large-scale SAP cloud transformations into the architecture.
-
2. Delivery & Oversight
-
Own end-to-end delivery of cloud and SAP platform architecture across SAP ECS, system integrators, internal teams, and strategic vendors.
-
Break down architecture into implementable work packages and technical workstreams.
-
Track and unblock delivery across: network builds, connectivity, identity and trust, certificates, SAP cloud platform enablement, integration dependencies, and monitoring/operational visibility.
-
Enforce adherence to approved architecture and reject non-compliant designs or builds.
-
Escalate and resolve cross-team blockers affecting delivery, integration, or platform readiness.
-
Key Artifacts & Deliverables
-
Hybrid Cloud Architecture Blueprints & Diagrams: Detailed architecture documents and diagrams capturing the integrated AWS and SAP cloud environment design for the SAP S/4HANA landscape, including network connectivity patterns (e.g., VPC layout, AWS Transit Gateway connections to SAP RISE and corporate networks, routing flows), SAP cloud platform interactions, and security architecture overlays (e.g., network zones, identity, trust, and access flows).
-
Cloud Integration Design & Configuration Documents: Documentation of connectivity, identity, trust, and integration designs (e.g., DNS delegation, certificate trust setup, SSO integration between corporate identity providers and SAP systems, BTP connectivity, IAS/IPS trust configuration, and private connectivity patterns), specifying how SAP cloud platforms, enterprise SaaS applications, and on-premises/cloud systems will communicate securely.
-
Infrastructure Build & Cutover Runbooks: Clear implementation plans and runbooks for provisioning AWS infrastructure, enabling SAP cloud platform connectivity, and coordinating cutover activities across hybrid environments, used to guide SIs and internal teams during build and transition phases. Ensure repeatable, well-documented procedures exist for environment setup, configuration handoffs, scaling, cutover, and post-go-live support readiness.
-
Architecture Decision Records (ADRs) & Review Materials: Formal artifacts capturing key design decisions, trade-offs, and rationales across AWS and SAP cloud architecture domains (for example, connectivity approach, platform boundary ownership, identity and trust model, environment sizing, observability, and DR strategy). Prepare and present materials to architecture governance boards for endorsement and knowledge-sharing.
-
Operational Handover Documentation: Upon completion of build phases, produce thorough hybrid cloud and SAP platform support documentation (environment diagrams, configuration baselines, troubleshooting guides, monitoring and logging setup, identity and certificate dependencies, and support ownership boundaries) to ensure a smooth handover to long-term support teams.
-
Day-to-Day Activities (What to Expect)
-
Architecture & Design Collaboration: Attend and contribute to solution design workshops, technical stand-ups, and planning sessions. Translate high-level solution architecture into detailed AWS and SAP cloud platform designs, advising other architects on infrastructure, integration, identity, and platform implications and ensuring consistency across the hybrid landscape.
-
Provisioning Oversight & Coordination: Oversee day-to-day execution of AWS and SAP cloud platform setup activities in line with the program schedule. Direct and coordinate SIs and internal teams as they implement environment changes across networking, connectivity, DNS, certificate trust, identity, and SAP cloud platform enablement. Identify and remove roadblocks affecting environment readiness, integration sequencing, or delivery timelines.
-
Documentation & Assurance: Continuously refine and update hybrid cloud and SAP platform architecture documentation as designs evolve. Ensure that changes to network, integration, identity, and platform architecture are properly documented and repositories remain current. Validate that SI deliverables are consistent with approved architecture, technical standards, and cross-platform design decisions through regular reviews and walkthroughs.
-
Stakeholder Communication & Guidance: Provide regular updates to project management and technical leadership on hybrid cloud and SAP platform progress, risks, issues, and dependencies. Advise architects and delivery teams on AWS and SAP cloud platform best practices, integration patterns, and governance expectations. Lead technical discussions and shape solutions for emerging requirements while maintaining alignment with the program’s architectural vision, standards, and delivery schedule.
Qualifications & Skills Required
-
Education & Certification
-
Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
-
AWS Certified Solutions Architect – Professional is strongly preferred.
-
SAP cloud, integration, or security-related certifications are highly beneficial.
-
Experience & Technical Competencies
-
Cloud Architecture Experience: Extensive experience designing large-scale AWS and hybrid cloud environments (ideally 8+ years in cloud architecture or related roles). Proven expertise with AWS networking, cloud security, identity, encryption, certificates, observability, and core platform services, along with strong experience integrating enterprise networks, SaaS platforms, and SAP-managed cloud services into secure hybrid environments.
-
Enterprise Systems & ERP Knowledge: Experience supporting enterprise-scale IT programs, preferably ERP or other mission-critical transformations. Deep SAP functional expertise is not required; however, a strong understanding of SAP S/4HANA architecture, RISE with SAP deployment, and shared responsibility boundaries is expected. Experience with SAP BTP, identity/provisioning services, integration patterns, and technical cloud integration is highly desirable.
-
Architecture Visualization: Virtuosic diagramming skills, producing clear, technically precise architecture artifacts that translate complex hybrid cloud designs into actionable guidance for delivery teams.
-
Compute & Platform Expertise: Experience designing and supporting workloads on Windows Server, SQL Server, Red Hat Enterprise Linux (RHEL), and SUSE Linux in AWS environments. Ability to guide provisioning, configuration, patching, resiliency, and high-availability design for application and database tiers alongside broader cloud and platform architecture.
-
Leadership & Communication: Demonstrated ability to act as a technical lead in complex programs, coordinating across multiple teams and vendors. Excellent problem-solving skills with a hands-on mindset to resolve technical challenges. Strong communication skills to articulate architecture decisions and rationale to various audiences (from engineers to management). Ability to work collaboratively in a fast-paced project environment, navigating competing priorities and driving consensus on technical solutions.
Looking for meaningful work? We can help!
Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.
We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.
We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/
In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 800-567-9675 or [email protected].
#WES
#LI-SC1
