# Enterprise Infrastructure Architect

*/JobTypes/Enterprise_Infrastructure_Architect*

Departments: Enterprise Architecture, IT Infrastructure & Operations, Office of the CTO, Cloud Center of Excellence (CCoE), Global IT Engineering, Technology Strategy & Planning.

## Neighborhood

### Parent

- [Computer Occupations, All Other](/Occupations/Computer_Occupations,_All_Other) — parent · Occupations

### Siblings

- [AI Prompt Engineer](/JobTypes/AI_Prompt_Engineer) — siblings · JobTypes
- [Agency Technical Project Manager](/JobTypes/Agency_Technical_Project_Manager) — siblings · JobTypes
- [Agile Scrum Master](/JobTypes/Agile_Scrum_Master) — siblings · JobTypes
- [Application Security Engineer](/JobTypes/Application_Security_Engineer) — siblings · JobTypes
- [Blockchain Infrastructure and Node Engineer](/JobTypes/Blockchain_Infrastructure_and_Node_Engineer) — siblings · JobTypes
- [Blockchain Smart Contract Developer](/JobTypes/Blockchain_Smart_Contract_Developer) — siblings · JobTypes
- [Bug Bounty Hunter](/JobTypes/Bug_Bounty_Hunter) — siblings · JobTypes
- [Cadastral / Parcel Mapper](/JobTypes/Cadastral_%2F_Parcel_Mapper) — siblings · JobTypes
- [Clinical Trial Master File (TMF) Specialist](/JobTypes/Clinical_Trial_Master_File_(TMF)_Specialist) — siblings · JobTypes
- [Cloud Migration Project Manager](/JobTypes/Cloud_Migration_Project_Manager) — siblings · JobTypes
- [Cloud Penetration Tester](/JobTypes/Cloud_Penetration_Tester) — siblings · JobTypes
- [Cloud Security Engineer](/JobTypes/Cloud_Security_Engineer) — siblings · JobTypes
- [Cloud Solutions Architect](/JobTypes/Cloud_Solutions_Architect) — siblings · JobTypes
- [Consulting DFIR Analyst](/JobTypes/Consulting_DFIR_Analyst) — siblings · JobTypes
- [Corporate Incident Responder (Internal DFIR)](/JobTypes/Corporate_Incident_Responder_(Internal_DFIR)) — siblings · JobTypes
- [Corporate Webmaster](/JobTypes/Corporate_Webmaster) — siblings · JobTypes
- [Cyber Insurance Incident Investigator](/JobTypes/Cyber_Insurance_Incident_Investigator) — siblings · JobTypes
- [Cybersecurity Project Manager](/JobTypes/Cybersecurity_Project_Manager) — siblings · JobTypes
- [Data Center Automation Engineer](/JobTypes/Data_Center_Automation_Engineer) — siblings · JobTypes
- [Data Integration Project Manager](/JobTypes/Data_Integration_Project_Manager) — siblings · JobTypes
- [Defense and Intelligence Cyber Forensics Analyst](/JobTypes/Defense_and_Intelligence_Cyber_Forensics_Analyst) — siblings · JobTypes
- [Detection and Response Engineer](/JobTypes/Detection_and_Response_Engineer) — siblings · JobTypes
- [DevOps Systems Engineer](/JobTypes/DevOps_Systems_Engineer) — siblings · JobTypes
- [Developer Advocate](/JobTypes/Developer_Advocate) — siblings · JobTypes
- [Digitization & Imaging Project Manager](/JobTypes/Digitization_&_Imaging_Project_Manager) — siblings · JobTypes
- [Disaster Recovery Specialist](/JobTypes/Disaster_Recovery_Specialist) — siblings · JobTypes
- [E-911 / Public Safety GIS Specialist](/JobTypes/E-911_%2F_Public_Safety_GIS_Specialist) — siblings · JobTypes
- [E-commerce Site Administrator](/JobTypes/E-commerce_Site_Administrator) — siblings · JobTypes
- [ERP Implementation Manager](/JobTypes/ERP_Implementation_Manager) — siblings · JobTypes
- [Endpoint Security Engineer](/JobTypes/Endpoint_Security_Engineer) — siblings · JobTypes
- [Engineering Document Controller](/JobTypes/Engineering_Document_Controller) — siblings · JobTypes
- [Enterprise Blockchain Architect](/JobTypes/Enterprise_Blockchain_Architect) — siblings · JobTypes
- [Enterprise CMS Administrator](/JobTypes/Enterprise_CMS_Administrator) — siblings · JobTypes
- [Enterprise Content Management (ECM) Administrator](/JobTypes/Enterprise_Content_Management_(ECM)_Administrator) — siblings · JobTypes
- [Environmental Consulting GIS Technician](/JobTypes/Environmental_Consulting_GIS_Technician) — siblings · JobTypes
- [Federal / Cleared Systems Integrator](/JobTypes/Federal_%2F_Cleared_Systems_Integrator) — siblings · JobTypes
- [Field Data Collection Technician (GPS/UAV)](/JobTypes/Field_Data_Collection_Technician_(GPS%2FUAV)) — siblings · JobTypes
- [GEOINT / Tactical Geospatial Technician](/JobTypes/GEOINT_%2F_Tactical_Geospatial_Technician) — siblings · JobTypes
- [Geographic Information Systems Analyst](/JobTypes/Geographic_Information_Systems_Analyst) — siblings · JobTypes
- [Government FOIA & Records Officer](/JobTypes/Government_FOIA_&_Records_Officer) — siblings · JobTypes
- [Government Web Administrator](/JobTypes/Government_Web_Administrator) — siblings · JobTypes
- [Higher Education Web Administrator](/JobTypes/Higher_Education_Web_Administrator) — siblings · JobTypes
- [ICS / SCADA Penetration Tester](/JobTypes/ICS_%2F_SCADA_Penetration_Tester) — siblings · JobTypes
- [IT Asset Manager](/JobTypes/IT_Asset_Manager) — siblings · JobTypes
- [IT Compliance Auditor](/JobTypes/IT_Compliance_Auditor) — siblings · JobTypes
- [Identity and Access Management Engineer](/JobTypes/Identity_and_Access_Management_Engineer) — siblings · JobTypes
- [Incident Response Engineer](/JobTypes/Incident_Response_Engineer) — siblings · JobTypes
- [Information Governance Analyst](/JobTypes/Information_Governance_Analyst) — siblings · JobTypes
- [Infrastructure / Network Penetration Tester](/JobTypes/Infrastructure_%2F_Network_Penetration_Tester) — siblings · JobTypes
- [Infrastructure Project Manager](/JobTypes/Infrastructure_Project_Manager) — siblings · JobTypes
- [Intranet / SharePoint Administrator](/JobTypes/Intranet_%2F_SharePoint_Administrator) — siblings · JobTypes
- [IoT / Embedded Systems Penetration Tester](/JobTypes/IoT_%2F_Embedded_Systems_Penetration_Tester) — siblings · JobTypes
- [IoT Solutions Architect](/JobTypes/IoT_Solutions_Architect) — siblings · JobTypes
- [Law Enforcement Digital Forensics Examiner](/JobTypes/Law_Enforcement_Digital_Forensics_Examiner) — siblings · JobTypes
- [Legal Records & eDiscovery Specialist](/JobTypes/Legal_Records_&_eDiscovery_Specialist) — siblings · JobTypes
- [LiDAR / Remote Sensing Data Processor](/JobTypes/LiDAR_%2F_Remote_Sensing_Data_Processor) — siblings · JobTypes
- [MEV Searcher](/JobTypes/MEV_Searcher) — siblings · JobTypes
- [Malware Analyst and Reverse Engineer](/JobTypes/Malware_Analyst_and_Reverse_Engineer) — siblings · JobTypes
- [Mobile Application Penetration Tester](/JobTypes/Mobile_Application_Penetration_Tester) — siblings · JobTypes
- [Mobile Device Forensics Examiner](/JobTypes/Mobile_Device_Forensics_Examiner) — siblings · JobTypes
- [Network Security Engineer](/JobTypes/Network_Security_Engineer) — siblings · JobTypes
- [Physical Penetration Tester](/JobTypes/Physical_Penetration_Tester) — siblings · JobTypes
- [Pre-Sales Systems Engineer](/JobTypes/Pre-Sales_Systems_Engineer) — siblings · JobTypes
- [Product Security Engineer](/JobTypes/Product_Security_Engineer) — siblings · JobTypes
- [Protocol Core Developer](/JobTypes/Protocol_Core_Developer) — siblings · JobTypes
- [Purple Team Engineer](/JobTypes/Purple_Team_Engineer) — siblings · JobTypes
- [Quality Document Control Specialist (ISO/FDA)](/JobTypes/Quality_Document_Control_Specialist_(ISO%2FFDA)) — siblings · JobTypes
- [RPA (Robotic Process Automation) Developer](/JobTypes/RPA_(Robotic_Process_Automation)_Developer) — siblings · JobTypes
- [Red Team Operator](/JobTypes/Red_Team_Operator) — siblings · JobTypes
- [SCADA IT Specialist](/JobTypes/SCADA_IT_Specialist) — siblings · JobTypes
- [Salesforce Administrator](/JobTypes/Salesforce_Administrator) — siblings · JobTypes
- [Search Engine Optimization Specialist](/JobTypes/Search_Engine_Optimization_Specialist) — siblings · JobTypes
- [Security Automation Engineer](/JobTypes/Security_Automation_Engineer) — siblings · JobTypes
- [SharePoint / M365 Records Administrator](/JobTypes/SharePoint_%2F_M365_Records_Administrator) — siblings · JobTypes
- [Site Reliability Engineer (SRE)](/JobTypes/Site_Reliability_Engineer_(SRE)) — siblings · JobTypes
- [Smart Contract Engineer](/JobTypes/Smart_Contract_Engineer) — siblings · JobTypes
- [Smart Contract Security Auditor](/JobTypes/Smart_Contract_Security_Auditor) — siblings · JobTypes
- [Social Engineering Specialist](/JobTypes/Social_Engineering_Specialist) — siblings · JobTypes
- [Software Delivery Manager](/JobTypes/Software_Delivery_Manager) — siblings · JobTypes
- [Storage Systems Engineer](/JobTypes/Storage_Systems_Engineer) — siblings · JobTypes
- [Transportation / Routing GIS Technician](/JobTypes/Transportation_%2F_Routing_GIS_Technician) — siblings · JobTypes
- [Utility Network GIS Technician](/JobTypes/Utility_Network_GIS_Technician) — siblings · JobTypes
- [Virtualization Engineer](/JobTypes/Virtualization_Engineer) — siblings · JobTypes
- [Web Application Penetration Tester](/JobTypes/Web_Application_Penetration_Tester) — siblings · JobTypes
- [Web Hosting / Server Administrator](/JobTypes/Web_Hosting_%2F_Server_Administrator) — siblings · JobTypes
- [Web Operations (WebOps) Engineer](/JobTypes/Web_Operations_(WebOps)_Engineer) — siblings · JobTypes
- [Web3 Full-Stack Engineer](/JobTypes/Web3_Full-Stack_Engineer) — siblings · JobTypes
- [Zero-Knowledge (ZK) Cryptography Engineer](/JobTypes/Zero-Knowledge_(ZK)_Cryptography_Engineer) — siblings · JobTypes
- [eDiscovery and Litigation Forensics Specialist](/JobTypes/eDiscovery_and_Litigation_Forensics_Specialist) — siblings · JobTypes

### Required knowledge

- [High-availability design](/Knowledge/High-availability_design) — requires knowledge · Knowledge
- [Cloud Computing](/Knowledge/Cloud_Computing) — requires knowledge · Knowledge
- [IT Cost Management](/Knowledge/IT_Cost_Management) — requires knowledge · Knowledge
- [Storage and Networking Systems](/Knowledge/Storage_and_Networking_Systems) — requires knowledge · Knowledge
- [Virtualization and Containers](/Knowledge/Virtualization_and_Containers) — requires knowledge · Knowledge

### Perform

- [Plan Capacity and Scaling](/Tasks/Plan_Capacity_and_Scaling) — perform · Tasks
- [Advise Engineering on Deployment Patterns](/Tasks/Advise_Engineering_on_Deployment_Patterns) — perform · Tasks
- [Set Infrastructure Cost Optimization Policy](/Tasks/Set_Infrastructure_Cost_Optimization_Policy) — perform · Tasks
- [Evaluate Virtualization and Container Platforms](/Tasks/Evaluate_Virtualization_and_Container_Platforms) — perform · Tasks
- [Review Infrastructure Designs for Compliance](/Tasks/Review_Infrastructure_Designs_for_Compliance) — perform · Tasks
- [Architect Disaster Recovery Topologies](/Tasks/Architect_Disaster_Recovery_Topologies) — perform · Tasks
- [Define Cloud and Hybrid Infrastructure Standards](/Tasks/Define_Cloud_and_Hybrid_Infrastructure_Standards) — perform · Tasks
- [Design Compute and Storage Topologies](/Tasks/Design_Compute_and_Storage_Topologies) — perform · Tasks

### Type of

- [Computer Network Architects](/Occupations/Computer_Network_Architects) — type of · Occupations

### Problems this exposes

- [no attribution path from a policy rule to the line-item savings it produced, so policy can't be defended](/Problems/no_attribution_path_from_a_policy_rule_to_the_line-item_savings_it_produced,_so_policy_can't_be_defended) — exposes problem · Problems
- [rightsizing/reservation policy decisions outdated by instance-family and pricing changes faster than policy review](/Problems/rightsizing%2Freservation_policy_decisions_outdated_by_instance-family_and_pricing_changes_faster_than_policy_review) — exposes problem · Problems
- [cost-optimization policy authored centrally but unenforceable at the team level where spend actually accrues](/Problems/cost-optimization_policy_authored_centrally_but_unenforceable_at_the_team_level_where_spend_actually_accrues) — exposes problem · Problems
- [approved-at-review designs drifting out of compliance post-deploy with no continuous re-attestation](/Problems/approved-at-review_designs_drifting_out_of_compliance_post-deploy_with_no_continuous_re-attestation) — exposes problem · Problems
- [control mappings (SOC2/PCI/HIPAA) re-checked by hand against each new design with no reusable evidence trail](/Problems/control_mappings_(SOC2%2FPCI%2FHIPAA)_re-checked_by_hand_against_each_new_design_with_no_reusable_evidence_trail) — exposes problem · Problems
- [compliance design-review as a manual gate that becomes the delivery bottleneck under sprint pressure](/Problems/compliance_design-review_as_a_manual_gate_that_becomes_the_delivery_bottleneck_under_sprint_pressure) — exposes problem · Problems
- [topology diagrams diverging from deployed reality with no reconciliation against running infrastructure](/Problems/topology_diagrams_diverging_from_deployed_reality_with_no_reconciliation_against_running_infrastructure) — exposes problem · Problems
- [storage-tier and IOPS placement decisions that lock cost contours an architect can't revisit without re-platforming](/Problems/storage-tier_and_IOPS_placement_decisions_that_lock_cost_contours_an_architect_can't_revisit_without_re-platforming) — exposes problem · Problems
- [compute/storage topology sized for a workload profile that shifts before the design lands](/Problems/compute%2Fstorage_topology_sized_for_a_workload_profile_that_shifts_before_the_design_lands) — exposes problem · Problems
- [no telemetry on which recommended patterns engineering teams actually adopted vs quietly bypassed](/Problems/no_telemetry_on_which_recommended_patterns_engineering_teams_actually_adopted_vs_quietly_bypassed) — exposes problem · Problems
- [golden-path deployment patterns issued in design review but never enforced at the pipeline, so teams diverge silently](/Problems/golden-path_deployment_patterns_issued_in_design_review_but_never_enforced_at_the_pipeline,_so_teams_diverge_silently) — exposes problem · Problems
- [deployment-pattern guidance staling faster than the advisory cadence as platform primitives churn](/Problems/deployment-pattern_guidance_staling_faster_than_the_advisory_cadence_as_platform_primitives_churn) — exposes problem · Problems
- [designing a vSphere-to-cloud exit path while the existing estate must keep running on it](/Problems/designing_a_vSphere-to-cloud_exit_path_while_the_existing_estate_must_keep_running_on_it) — exposes problem · Problems
- [vSphere cluster sizing and DRS/HA design under a post-Broadcom licensing model that reshapes the cost case](/Problems/vSphere_cluster_sizing_and_DRS%2FHA_design_under_a_post-Broadcom_licensing_model_that_reshapes_the_cost_case) — exposes problem · Problems
- [vSphere host and datastore capacity headroom decisions that can't flex as elastically as cloud](/Problems/vSphere_host_and_datastore_capacity_headroom_decisions_that_can't_flex_as_elastically_as_cloud) — exposes problem · Problems
- [drift between Terraform-declared and actually-running infrastructure that no one owns reconciling](/Problems/drift_between_Terraform-declared_and_actually-running_infrastructure_that_no_one_owns_reconciling) — exposes problem · Problems
- [Terraform module sprawl and version skew across teams with no enforced shared-module contract](/Problems/Terraform_module_sprawl_and_version_skew_across_teams_with_no_enforced_shared-module_contract) — exposes problem · Problems
- [state-file segmentation and locking design that determines blast radius of every apply](/Problems/state-file_segmentation_and_locking_design_that_determines_blast_radius_of_every_apply) — exposes problem · Problems
- [Azure management-group and Policy hierarchy design that must encode standards without freezing subscription delivery](/Problems/Azure_management-group_and_Policy_hierarchy_design_that_must_encode_standards_without_freezing_subscription_delivery) — exposes problem · Problems
- [hub-spoke and ExpressRoute topology choices that bind hybrid connectivity cost for years](/Problems/hub-spoke_and_ExpressRoute_topology_choices_that_bind_hybrid_connectivity_cost_for_years) — exposes problem · Problems
- [reconciling Azure-native PaaS adoption against a cloud-agnostic reference architecture](/Problems/reconciling_Azure-native_PaaS_adoption_against_a_cloud-agnostic_reference_architecture) — exposes problem · Problems
- [multi-cluster topology and namespace-tenancy model that must scale without per-team snowflakes](/Problems/multi-cluster_topology_and_namespace-tenancy_model_that_must_scale_without_per-team_snowflakes) — exposes problem · Problems
- [cluster-upgrade and CRD/API-deprecation cadence forcing architecture rework on a fixed clock](/Problems/cluster-upgrade_and_CRD%2FAPI-deprecation_cadence_forcing_architecture_rework_on_a_fixed_clock) — exposes problem · Problems
- [designing pod-level resource and scheduling policy that survives noisy-neighbor contention at scale](/Problems/designing_pod-level_resource_and_scheduling_policy_that_survives_noisy-neighbor_contention_at_scale) — exposes problem · Problems
- [AWS service-proliferation outpacing the architect's ability to vet each new service against the reference architecture](/Problems/AWS_service-proliferation_outpacing_the_architect's_ability_to_vet_each_new_service_against_the_reference_architecture) — exposes problem · Problems
- [cross-account IAM and VPC-peering topology growing into an unauditable mesh](/Problems/cross-account_IAM_and_VPC-peering_topology_growing_into_an_unauditable_mesh) — exposes problem · Problems
- [Organizations SCP and account-vending design that must stay coherent as new accounts multiply](/Problems/Organizations_SCP_and_account-vending_design_that_must_stay_coherent_as_new_accounts_multiply) — exposes problem · Problems
- [virtualization/container platform evaluation weighing lock-in against fit, a decision that outlives the team that made it](/Problems/virtualization%2Fcontainer_platform_evaluation_weighing_lock-in_against_fit,_a_decision_that_outlives_the_team_that_made_it) — exposes problem · Problems
- [disaster-recovery topology design with RTO/RPO targets validated across hybrid on-prem and cloud, rarely tested end-to-end](/Problems/disaster-recovery_topology_design_with_RTO%2FRPO_targets_validated_across_hybrid_on-prem_and_cloud,_rarely_tested_end-to-end) — exposes problem · Problems
- [capacity and cost forecasting across hybrid on-prem and cloud with no unified view](/Problems/capacity_and_cost_forecasting_across_hybrid_on-prem_and_cloud_with_no_unified_view) — exposes problem · Problems
- [enforcing architecture-review-board standards that teams route around for speed](/Problems/enforcing_architecture-review-board_standards_that_teams_route_around_for_speed) — exposes problem · Problems
- [landing-zone guardrails that secure multi-account cloud without blocking delivery teams](/Problems/landing-zone_guardrails_that_secure_multi-account_cloud_without_blocking_delivery_teams) — exposes problem · Problems
- [maintaining an accurate target-state reference architecture as teams diverge from it](/Problems/maintaining_an_accurate_target-state_reference_architecture_as_teams_diverge_from_it) — exposes problem · Problems
- [tech-debt-vs-greenfield sequencing when a legacy core can't be cut over atomically](/Problems/tech-debt-vs-greenfield_sequencing_when_a_legacy_core_can't_be_cut_over_atomically) — exposes problem · Problems

### Uses software

- [Kubernetes](/Software/Kubernetes) — uses software · Software
- [Terraform](/Software/Terraform) — uses software · Software
- [Microsoft Azure](/Software/Microsoft_Azure) — uses software · Software
- [Amazon Web Services](/Software/Amazon_Web_Services) — uses software · Software
- [VMware vSphere](/Software/VMware_vSphere) — uses software · Software

### Requires ability

- [Fluency of Ideas](/Ability/Fluency_of_Ideas) — requires ability · Ability
- [Information Ordering](/Ability/Information_Ordering) — requires ability · Ability
- [Systems Evaluation](/Ability/Systems_Evaluation) — requires ability · Ability
- [Deductive Reasoning](/Ability/Deductive_Reasoning) — requires ability · Ability

### Required skills

- [Technology Evaluation](/Skills/Technology_Evaluation) — requires skill · Skills
- [Infrastructure as Code](/Skills/Infrastructure_as_Code) — requires skill · Skills
- [Capacity Planning](/Skills/Capacity_Planning) — requires skill · Skills
- [Cloud Platform Design](/Skills/Cloud_Platform_Design) — requires skill · Skills
- [Infrastructure Architecture Design](/Skills/Infrastructure_Architecture_Design) — requires skill · Skills

### Engage in

- [Architect Disaster Recovery Topologies](/Activities/Architect_Disaster_Recovery_Topologies) — engage in · Activities
- [Define Cloud and Hybrid Infrastructure Standards](/Activities/Define_Cloud_and_Hybrid_Infrastructure_Standards) — engage in · Activities
- [Design Compute and Storage Topologies](/Activities/Design_Compute_and_Storage_Topologies) — engage in · Activities