Architecture Validation & Guidance:

• Review and validate the design documents for the private air-gapped cloud (vCF 9, NSX-T, Cisco ACI), identifying gaps, risks, and non-conformances against best practices, dependencies and overarching NATO architecture and directives documents;
• Provide design guidance to infrastructure and platform teams throughout the implementation lifecycle;
• Define and maintain architecture decision records (ADRs) and ensure traceability from requirements to design.

Interface Control & Integration:

• Define and specify Interface Control Documents (ICDs) between the private cloud infrastructure and all producer/consumer services;
• Ensure interfaces are designed with security, observability, and automation in mind;
• Maintain an interface register and track ICD sign-off across workstream owners.

Cross-team Coordination:

• Coordinate design and implementation efforts between the cyber security team and the infrastructure team, specifically covering:

- Privileged Access Management (PAM) implementation via CyberArk;

- PKI design and certificate lifecycle management;

- Cyber Security Monitoring capability integration with the private cloud.

•  Chair or co-chair joint design sessions and resolve cross-team technical dependencies.

Automation & IaC Enablement:

• Validate and guide implementation of infrastructure automation using Ansible / AAP, Terraform, Jenkins, and vCF Automation;
• Define the automation and IaC target operating model for the cloud platform team;
• Advise on and document the transition from traditional infrastructure support to an automation-first operating model;
• Support upskilling of cloud operating teams in automation principles and tooling.