AI Architect
Design AI systems that survive a security review, a budget cycle, and a year in production.
Who this is for
Solution and enterprise architects who own the shape of the system, not just a service.
What you should be able to do
Produce a reference architecture with an explicit trust boundary, a cost model, and a rollout plan someone else can execute.
Career ladder
The titles this track maps onto. Levels differ between companies. The useful part is the direction, and what each step adds to the one before it.
- Junior AI Solutions Architect
- AI Solutions Architect
- Senior AI Architect
- Principal AI Architect
- Chief AI Architect
Tech stack
What the work is actually done with. Grouped by the job each tool does, so the list reads as a system rather than a pile of names.
- Cloud
- AWSAzureGCP
- Runtime
- KubernetesTerraformDocker
- AI
- BedrockAzure OpenAIVertex AIRAGMCP
- Cross-cutting
- IAMZero TrustEvent-driven designCost modelling
The delivery flow
The order the work actually happens in. Each step is where a decision gets made and written down, not a chapter heading.
- Business problem
- Reference architecture
- Trust boundary + IAM
- Data + retrieval layer
- Model / agent layer
- Deployment topology
- Cost model
- Rollout plan
Reference repository structure
A starting layout for this track. The directories are the ones that get added late and hurt. Decisions, evals, policy, lineage. Promoted to the top level where they are visible.
reference-architecture/ ├── context/ # C4 level 1 - systems and actors ├── containers/ # C4 level 2 - deployable units ├── decisions/ # ADRs, one file per decision, numbered │ └── 0001-why-rag-not-finetune.md ├── diagrams/ # source, not exported images ├── threat-model/ # STRIDE per trust boundary ├── cost/ # per-environment model and assumptions ├── infrastructure/ # terraform, per environment └── rollout/ # phases, exit criteria, rollback
Reading path
12 published guides on this track. Every one is a live page on this site. Nothing here is a placeholder.
- Building an Enterprise AI Stack in 2026: Architecture That Actually Ships
- Zero Trust Architecture: The Complete Implementation Guide for Multi-Cloud Environments
- AI Security Architecture: Protecting LLMs, Data Pipelines, and Model Endpoints
- Cloud Services, Architecture to Deployment [2026]
- Data Engineering for AI: The Pipeline Architecture Every ML Team Needs
- What Are Governed AI Agents? Definition, Architecture and Why They Matter [2026]
- Zero Trust Architecture for Nigerian Government Cloud
- Zero Trust Architecture on AWS: Step-by-Step Guide
- Zero Trust Architecture: Complete Implementation Guide [2026]
- AWS SAA vs Azure AZ-305: Which Cloud Architect Certification Pays More in 2026?
- AWS Solutions Architect Associate (SAA-C03) Exam Cheat Sheet, 2026, Citadel Cloud Management
- AWS Solutions Architect Salary 2026: SAA-C04 ROI Analysis
Reference implementations
Citadel’s open-source repositories for this track. Terraform modules, MCP servers, and reference architectures you can read, fork, and run. Apache/MIT licensed; check each repository for its terms.
- GitHubsoftware-factory-architectureEnterprise Multi-Cloud DevSecOps Software Factory Architecture, Interactive Reference Diagramsoftware-factory-architecture on github.com (external site, opens in a new tab)
- GitHubmulti-cloud-landing-zoneMulti-cloud landing zone architecture for AWS, Azure, and GCP with identity federationmulti-cloud-landing-zone on github.com (external site, opens in a new tab)
- GitHubRideFlowNext-Generation Ride-Hailing Platform, 19 Microservices | TypeScript/Express | AWS EKS | 58 Autonomous AgentsRideFlow on github.com (external site, opens in a new tab)
- GitHub ★ 2citadel-saas-factory265 autonomous AI agents across 15 business domains. Full-stack SaaS framework with real model routing, RAG pipeline, guardrails, and Chrome extension. FastAPI + Next.js + K3s. Runs on any server. $0/month software cost.citadel-saas-factory on github.com (external site, opens in a new tab)
Primary sources
The standards, framework documents, and vendor references this track is built against. Go here when you need the authoritative wording rather than a summary. In a security review or an audit, the source is what counts.
- AWS Well-Architected Framework (external site, opens in a new tab)
- AWS Well-Architected Machine Learning Lens (external site, opens in a new tab)
- Azure Architecture Center (external site, opens in a new tab)
- Google Cloud Architecture Framework (external site, opens in a new tab)
- CNCF Cloud Native Landscape (external site, opens in a new tab)
- The Twelve-Factor App (external site, opens in a new tab)
- C4 model for software architecture (external site, opens in a new tab)