The Services Technology Modernization/Transformation program is a strategic, multi-year initiative to modernize our core platforms by migrating to an OpenShift environment on Prem and later onto Public Cloud. This transformation is fundamentally redesigning our operating model, impacting the roadmap of various business-critical applications and anchoring a deliberate journey from legacy monolithic systems to resilient, cloud-native microservices.
The Application Platform Cloud Solutions Engineer is a senior, independent leader responsible for engineering and defining the target state technical architecture for critical domains within this program. This role is technology-focused; it is centered on shaping the future of our function by defining technical capabilities, end-to-end processes, data flows, controls, and network connectivity across both private (on-prem OpenShift/Kubernetes) and public cloud (AWS/Google Cloud Platform) environments. You will be the primary driver in translating strategic goals into a coherent business/technology blueprint that will guide the transformation, including the decomposition of monolithic applications into microservices and the design of secure, resilient connectivity between on-prem applications, clients, market data providers, and payments networks.
Reporting to the Infra and Platform Lead, you will work with a small team of application architects and with senior stakeholders across Business, Operations, and Technology to ensure the program's success from a business process, engineering, and functional perspective.
Key Responsibilities- Define Target State Architecture: Lead the definition, engineering, and modeling of the target state technology architecture for key domains in Payments, Trade & Working Capital, Core Accounts, Digital Technology, Issuer and Investor Services - spanning private cloud (on-prem OpenShift/Kubernetes) and public cloud (AWS/Google Cloud Platform) platforms.
- Drive Application Modernization: Lead the modernization journey of monolithic applications into microservices and cloud-native architectures, applying proven patterns (e.g., Strangler Fig, Domain-Driven Design, API-led decomposition, event-driven architecture) to re-platform and re-architect business-critical workloads.
- Engineer Hybrid & Multi-Cloud Platforms: Design and build enterprise-grade runtime platforms using containerization (Docker/Podman), orchestration (Kubernetes/OpenShift), service mesh, and Infrastructure as Code (Terraform/Ansible/Helm) across on-prem and public cloud footprints.
- Architect Network Connectivity: Design and engineer robust, low-latency, and secure network connectivity that links on-prem applications with external ecosystems - including client connectivity (secure client-facing channels, leased lines, VPN/MPLS, API gateways), market data connectivity (real-time and streaming feeds from exchanges and data vendors such as Bloomberg/Refinitiv, multicast/FIX), and payments network connectivity (SWIFT, ACH, RTGS, card and real-time payment rails). Ensure hybrid connectivity patterns (Direct Connect/Interconnect, VPN, peering, DNS, global traffic management) span on-prem, private, and public cloud environments.
- Process Mapping & Analysis: Map and critically analyze current state business processes and application landscapes to identify gaps, pain points, technical debt, and opportunities for simplification, standardization, and automation.
- Design Blueprints: Develop detailed process models, functional designs, reference architectures, network topology diagrams, and data flow diagrams that articulate the future state, ensuring they align with strategic objectives and regulatory requirements.
- Champion Data & Controls: Champion the design of robust reconciliation and substantiation frameworks from a business process and data integrity perspective, ensuring data is complete, accurate, and timely as workloads migrate from monolithic data stores to distributed, cloud-native data platforms.
- Embed DevSecOps & Reliability: Establish standardized CI/CD pipelines, GitOps workflows, automated security gates, and Site Reliability Engineering (SRE) practices to accelerate delivery velocity while ensuring resilience, observability, and compliance.
- Stakeholder Collaboration: Collaborate with senior stakeholders across Application Development, Architects, Network Engineering, and Operations to gather requirements, build consensus, and ensure the target architecture meets critical business needs.
- Lead & Mentor: Lead and mentor a team of SMEs, fostering a culture of Platform/Infrastructure design and delivery process excellence, strategic thinking, engineering rigor, and a deep understanding of the business function.
Requirements- Extensive Experience: Proven track record as a Platform Architect, Cloud Solutions Engineer, Process Architect, or in a similar strategic role within the financial services industry.
- Deep Subject Matter Expertise: Deep functional and hands-on knowledge of computer systems, cloud technology/OpenShift, including AWS/Google Cloud Platform (public cloud) and on-prem/private cloud, networking, client connectivity, regulatory exposure, and systems risk management.
- Private & Public Cloud Technology Skills: Hands-on expertise across:
- Private Cloud: Red Hat OpenShift, Kubernetes, VMware/virtualized and bare-metal infrastructure, on-prem container platforms.
- Public Cloud: AWS (EKS, ECS, Lambda, S3, RDS, IAM, VPC) and Google Cloud Platform (GKE, Cloud Run, IAM), hybrid connectivity, and landing zone design.
- Platform Engineering: Docker/Podman, Helm, service mesh (Istio/Envoy), API gateways, Infrastructure as Code (Terraform, Ansible), and GitOps (ArgoCD/Flux).
- CI/CD & Observability: Jenkins/Tekton/Harness, Prometheus, Grafana, OpenTelemetry, and DevSecOps tooling.
- Networking & Connectivity Experience: Proven hands-on experience designing and engineering enterprise network connectivity to integrate on-prem applications with external parties, including:
- On-Prem & Hybrid Connectivity: Connecting on-prem applications across data centers, private cloud, and public cloud using VPN, MPLS, Direct Connect/Interconnect, VPC/subnet design, peering, load balancing, firewalls, DNS, and TLS/mTLS.
- Client Connectivity: Secure client-facing connectivity via leased lines, extranet/VPN, API gateways, and managed file transfer, with strong focus on security, entitlements, and resilience.
- Market Data Connectivity: Real-time and streaming market data integration from exchanges and vendors (e.g., Bloomberg, Refinitiv/LSEG), including multicast, FIX protocol, low-latency feed handlers, and failover design.
- Payments Network Connectivity: Connectivity to payments rails and networks such as SWIFT, ACH, RTGS, card networks, and real-time/instant payment schemes, including messaging standards (e.g., ISO 20022, MT/MX) and secure gateway integration.
- Monolith-to-Microservices Modernization: Demonstrated experience architecting and delivering the modernization journey of monolithic applications (e.g., Java EE/Spring monoliths, legacy messaging, monolithic RDBMS) into microservices and event-driven, cloud-native architectures - including application decomposition, data migration, and API enablement.
- Transformation Experience: Significant experience in large-scale business transformation programs, preferably involving a migration to Public Cloud infrastructure along with On-prem implementation.
- Stakeholder Influence: Exceptional communication and stakeholder management skills, with a proven ability to influence senior leaders and articulate complex technical and business concepts to diverse audiences.
- Strategic Mindset: A strategic thinker who can connect detailed process and engineering design to broader business outcomes and long-term objectives.
Qualifications & Experience- 12+ years relevant experience in Solutions Architecture / Cloud Engineering with true end-to-end technology delivery process hands-on experience.
- Hands-on engineering experience across both private and public cloud platforms, container orchestration, enterprise networking, and application modernization.
- Demonstrated experience connecting on-prem applications with client, market data, and payments network ecosystems.
- Consistently demonstrates clear and concise written and verbal communication.
- Management and prioritization skills.
- Ability to develop working relationships.
- Ability to manage multiple activities and changing priorities and work under pressure to meet tight deadlines.
- Self-starter with ability to take the initiative and master new tasks quickly.
Education- Bachelor's/University degree or equivalent experience, potentially Master's degree.
- Industry certifications on Public cloud technologies and Networking are a Plus
What We OfferJoin a team shaping the technical direction of a multi-year cloud transformation, with the scope to influence architecture decisions that affect critical platforms across Citi.
- Work in a hybrid model with 3 days in the office and 2 days working remotely.
- Take on strategic technical ownership with direct influence on Citi's cloud and architecture roadmap.
- Collaborate with architecture, network, and operations teams across a global organization.
- Access ongoing learning and development opportunities to deepen your cloud and platform engineering expertise.
- Benefit from financial wellbeing programs and resources that support your long-term goals.
- Build your career with support for work-life balance and family wellbeing.
Build the future of Citi's cloud and platform architecture by applying for this Lead Cloud Platform Architect role today.
Job Family Group: Technology
Job Family:Digital Software Engineering
Time Type:Full time
Primary Location:Irving Texas United States
Primary Location Full Time Salary Range:$138,720.00 - $208,080.00
In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.
Most Relevant Skills Please see the requirements listed above.
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.
Anticipated Posting Close Date:Nov 04, 2026
Automated Processing and AIWe use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.
Illinois residents - AI Notice and Right
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi's EEO Policy Statement and the Know Your Rights poster.
