Job
Description
Overview As PepsiCo continues to scale its multi-cloud strategy (Azure, AWS, GCP, and optionally Alibaba), the Cloud Foundation & Governance Analyst will support the standardization, automation, and secure enablement of core cloud infrastructure services. This role is key to ensuring the foundational building blocks - networking, security, and landing zones - are implemented in a compliant, scalable, and reusable manner across business units and global regions. Familiarity with SAP on cloud environments is a strong plus. Responsibilities Cloud Foundation Design & Governance Support the design, implementation, and lifecycle management of PepsiCos standardized landing zones (Azure/AWS/GCP) across development, test, and production environments. Manage enterprise cloud constructsVNETs/VPCs, subnets, hybrid connectivity (ExpressRoute, VPN, Direct Connect), and DNS. Help define and enforce naming standards, resource hierarchies, tagging strategies, and identity integrations (AAD/Entra ID, AWS IAM, GCP IAM). Collaborate with enterprise security and compliance teams to integrate cloud-native controls with PepsiCos regulatory obligations (SOX, GDPR, HIPAA, etc.). Infrastructure as Code & Automation Contribute to IaC modules for repeatable deployment of foundational components (Terraform, Bicep, ARM, CloudFormation). Implement guardrails via policy-as-code (Azure Policy, AWS SCP, GCP Org Policies). Automate provisioning and CI/CD integrations for self-service cloud onboarding platforms. Maintain documentation and templates aligned to PepsiCos enterprise standards. Security & Risk Enablement Ensure integration with CSPM tooling such as Wiz (preferred), Defender for Cloud, Prisma Cloud, and enforce posture controls at foundation layer. Monitor and drive remediation of misconfigurations, identity risks, and insecure deployments at the foundational level. Partner with Security and Risk teams for cloud readiness assessments, hardening baselines, and audit prep. SAP Cloud Enablement (Nice to Have) Support infrastructure provisioning and security patterns for SAP workloads (S/4HANA, BW/4HANA) on Azure or AWS. Understand SAP landscape requirements such as HA/DR, large-scale VMs, shared storage, and dedicated network zoning. Coordinate with SAP Basis and application teams to ensure cloud foundation services meet performance and compliance expectations. Qualifications Bachelors degree in computer science, Information Technology, or related field Minimum of 9 years in IT and 5 years in cloud platform engineering, cloud infrastructure, or enterprise IT operations. Hands-on experience with Azure (required) and at least one of AWS or GCP. Deep understanding of cloud-native networking, hybrid connectivity, identity, and encryption services. Experience implementing and managing Landing Zones or enterprise-scale cloud foundations. Familiarity with IaC and DevOps principles; Git, CI/CD, and artifact repositories. Security and compliance alignment in regulated enterprise environments.
