Hiring a cloud architect is one of the highest-stakes technical decisions a CTO makes. Get it right, and you have someone who can turn your infrastructure into a competitive advantage — systems that scale cleanly, cost less than they should, and don't wake you up at 3am. Get it wrong, and you spend the next two years unwinding decisions that looked reasonable at the time.
The problem is that "cloud architect" has become one of the most inflated titles in tech. Everyone who has worked with AWS, Azure, or GCP for a few years can call themselves a cloud architect. The real ones — the engineers who have actually designed systems under pressure, made cost-reliability trade-offs that held up, and left infrastructure better than they found it — are a much smaller group.
This guide is for CTOs and technical leaders who need to tell the difference before making an offer.
What a cloud architect actually does — and what they don't
Before you evaluate candidates, be clear on what you're hiring for. Cloud architects sit at the intersection of engineering, operations, and business constraints. Their job is to design systems that meet your current needs without trapping you in a corner two years from now.
That means they spend their time on decisions like: which services to use and which to avoid, how to structure environments for security and cost efficiency, how to design for failure, and how to document architecture in a way that doesn't require them to be in every meeting forever.
What they don't do: write most of the code. A cloud architect who insists on hands-on implementation of everything they design is either miscast or hasn't learned to work at scale. The best architects design, review, guide, and unblock. They build systems — not just features.
The four types of cloud architect on the market
Like most senior technical roles, "cloud architect" covers a wide range of actual capabilities. Understanding which profile you're hiring for will sharpen every part of your search.
- Solutions architects — focus on mapping business requirements to cloud services. Strong on breadth, comfortable talking to non-technical stakeholders. Often the right hire for companies in early-stage cloud adoption.
- Infrastructure architects — go deep on networking, compute, storage, and reliability. They care about uptime, latency, and cost. The right hire when your platform is growing fast and you need someone to own its foundations.
- Security architects — specialize in identity, access, compliance, and threat modeling within cloud environments. Critical for fintech, healthcare, and any company handling regulated data.
- Platform architects — design the internal developer platform: the tools, abstractions, and golden paths that make other engineers more productive. The rarest and most expensive profile, and often the most impactful at scale.
Most job descriptions ask for all four. That's why most postings attract generalists instead of experts. Before you write a single requirement, decide which of these your company actually needs in the next 18 months.
Skills that signal real architecture experience
Design and decision-making
- Can produce architecture diagrams that engineers can actually build from
- Has made and owned cost-reliability-security trade-off decisions under real constraints
- Understands cloud-native patterns: event-driven architecture, microservices, serverless, and when not to use them
- Can design for failure — redundancy, failover, graceful degradation
Infrastructure as code and automation
- Terraform, Pulumi, or equivalent — not just familiarity, but production use
- CI/CD pipeline design for infrastructure changes
- Environment management: dev, staging, production parity
Multi-cloud or migration experience
- Has led or contributed to a cloud migration — on-prem to cloud, or cloud to cloud
- Understands the operational differences between AWS, Azure, and GCP
- Experience with hybrid environments where not everything lives in the cloud
Cost engineering
- Has owned a cloud cost reduction initiative — not just identified savings, but shipped them
- Understands reserved instances, spot pricing, and right-sizing at the service level
- Can build and maintain cost dashboards engineers actually use
Security and compliance depth
- Zero-trust architecture design
- SOC 2, ISO 27001, HIPAA, or PCI compliance within cloud environments
- Threat modeling and security review processes that don't slow engineering down
The credential question: certifications vs. experience
Cloud certifications — AWS Solutions Architect Professional, Google Cloud Professional Cloud Architect, Azure Solutions Architect Expert — are worth something. They demonstrate that a candidate has invested time in understanding the platform deeply and can think across its services. For an early filter, they're useful.
But certifications test knowledge of the platform, not judgment under pressure. Some of the best cloud architects you'll meet don't have a single certification. Some of the worst have all of them.
"I'd rather hire someone who can explain three bad architectural decisions they made and what they learned from them than someone who aced every cert exam and has never owned a production incident."
Use certifications as a signal, not a gate. What you're actually looking for is evidence of ownership: systems they designed that ran in production, migrations they led, incidents they fixed.
How to spot a cloud generalist pretending to be an architect
The market is full of engineers who have broad cloud exposure but limited architectural depth. They've worked across many services, they know the vocabulary, and they interview well. The gap shows up in the details.
- Describes their experience in terms of services used, not problems solved or systems built
- Can't explain why they chose one architectural pattern over another in a past project
- Has never been responsible for a production incident that traced back to an architectural decision they made
- Jumps to tool recommendations before understanding your constraints
- Talks about "best practices" without acknowledging trade-offs
- Can describe an architecture they'd design differently today — and why
- Has opinions about when microservices are the wrong answer
- Asks about your team size, engineering maturity, and budget before proposing anything
- Has documentation or diagrams they can share from past work
- Talks about cost and reliability in the same breath as features
Interview questions that reveal architectural thinking
Standard technical interviews don't work well for architects. You need open-ended questions that surface judgment and experience, not trivia.
The soft skills that separate good architects from great ones
Technical depth is necessary but not sufficient. A cloud architect who can't communicate their decisions clearly will create systems that only they understand — and that's a risk, not an asset.
Look for candidates who can explain a complex architectural trade-off to a non-technical stakeholder without dumbing it down. Who write documentation proactively, not because they were asked. Who push back on requirements when they see a better path, and can do it without making the conversation about ego.
The best cloud architects you'll hire are the ones who make the engineers around them more effective. They design systems that are understandable, patterns that are reusable, and processes that don't require them to be in the room.
Need to hire a cloud architect — without a 3-month search?
AWWCOR sources and pre-screens senior cloud talent globally. We help US tech teams find architects who have actually built production systems at scale — not just passed the certifications.
Get a Free Consultation