Opens this plan in Hirezen, where one click makes it a position.
Cloud Architect interview questionsCost review — last month's bill round
A 60 min interview plan with a time-boxed script, what each question is for, and the signals to score against. Key skills: Cloud cost optimisation from a real monthly bill: finding the design decisions behind NAT and cross-zone charges, keeping the spend that buys resilience, pricing a three-year commitment before anyone signs it, and making cost visible in a design before it reaches the bill..
Reading the bill
What this section is for
Purpose
Runs over a bill pack sent 24 hours ahead: one 30-day month of a SaaS company's production account on one provider, summarised by line, with a page of flow-log analysis and a short architecture note. Build it to these numbers, which add up. The lines total $108,200: managed PostgreSQL, $24,800 — a primary, a standby in a second zone and one read replica, 58% CPU at peak, covered by a one-year reservation; Kubernetes worker nodes on demand, $21,600 — average CPU 22%, with pod requests at 3.1 times measured p95 usage; NAT gateways, $14,004 — $99 of gateway hours and $13,905 for 309 TB processed at $0.045 per GB; data transfer between zones, $9,600 — 480 TB at $0.01 per GB in each direction; object storage, $8,970 for 390 TB; a three-year compute commitment, $7,300 — signed 14 months ago for the previous instance family and 31% used since the cluster moved to a newer family seven months ago; log ingestion, $6,150 for 12.3 TB, 64% of it from one service left at debug level after an incident in May; block storage and snapshots, $5,420, including 212 unattached volumes holding 4.1 TB ($328) and 38 TB of snapshots with no expiry ($1,900); and everything else, $10,356. The flow-log page splits the NAT traffic: 281 TB from a nightly usage-report job, running on the cluster, reading raw event files from object storage in the same region — the job rebuilds every tenant's report from the last 31 days of events, 9.36 TB, every night, when a day of events is about 302 GB — plus 21 TB of container image pulls and 7 TB to third-party APIs. It splits the traffic between zones: 190 TB of producers writing to partition leaders and brokers replicating to followers, in a self-run Kafka cluster with three replicas across three zones that carries the metered usage events customers are billed on; 250 TB of consumers fetching from leaders in other zones; and 40 TB of service calls routed to other zones. The 190 TB is deliberately correct — it is what survives losing a zone. The database, the largest line, is the red herring: it is sized to its peak and already reserved, and a candidate who starts there is reading size instead of shape. Book 70 minutes; the close is not part of the 60.
I'm [YOUR_NAME] and I look after architecture and cloud spend at [COMPANY_NAME]. You have last month's bill. I am not after a list of cost-saving tips — I want to hear which lines you think somebody decided, and what you would decide instead.
What this section is for
Purpose
Separates a cost review from a savings checklist before it starts, so a candidate who prepared a list of generic optimisations knows the list is not the answer.
Every number in the pack adds up, and all of it is fair to use. If you need something that is not there, ask, and I will tell you whether it exists.
What this section is for
Purpose
Makes asking for data an ordinary move. What the candidate asks for — flow data, owners, the commitment's terms — is itself read in the first question.
Take me through this bill. For each line you would act on, tell me whether it is a design decision or housekeeping, what you would change, and in what order.
What this question is for, and what to listen for
Purpose
The load-bearing question. Nearly everyone finds savings; the separator is whether the candidate ranks charges by the design that produces them, and follows the NAT line past the route into the job that sends the traffic.
Signals to score
- Reads the flow-log page before ranking anything, and ranks by the design behind a charge rather than by the size of the line
- Traces the NAT charge to the usage-report job and names both causes: its route to object storage passes through the NAT, and it re-reads 31 days of events every night
- Proposes a private route to object storage that bypasses the NAT, and checks what that route costs on this provider instead of assuming it is free
- Proposes reading one new day of events a night instead of 31, and says what that does to the 281 TB
- Leaves the database alone and says why: 58% at peak and already reserved
- Splits the zone traffic into replication that buys resilience and fetches and calls that buy nothing
- Groups the unattached volumes, the snapshots with no expiry and the debug logging as housekeeping with a named owner, and does not lead with them
- Treats the commitment as a decision to manage for 22 more months rather than a line to fix, and asks what kind of commitment it is
- Puts a monthly figure on each change and says which figures are measured and which are estimates
- Asks who owns the job, the cluster and the commitment before handing out work
Follow-up questions
- The biggest line is the database. Why are you not starting there?
- 281 TB went through the NAT to a service in the same region. What is that traffic, and why is there so much of it?
- Suppose the route to object storage stopped going through the NAT tomorrow. What would still be wrong with that job?
- Which of these would you hand to someone else this week, and which would you keep?
- How much of the $9,600 between zones would you go on paying, and why?
The price of a zone
What this section is for
Purpose
The question inside the zone line. Some cross-zone spend is waste and some of it is the whole point, and finance's suggestion removes both. The candidate has to separate them and say what the resilient part is worth in terms finance can weigh.
Finance has a suggestion for the $9,600 between zones: run Kafka, and everything that reads from it, in a single zone. What do you tell them?
What this question is for, and what to listen for
Purpose
Tests whether the candidate knows what a zone boundary buys, can find the spend that buys nothing without giving up the spend that buys survival, and can say it to someone who does not care about brokers.
Signals to score
- Says what a single-zone cluster would stop surviving — the loss of that zone — and what stops when that happens: the usage events customers are billed on
- Separates the 190 TB of producer and replication traffic, which is the cost of zone resilience, from the 250 TB and 40 TB that buy nothing
- Proposes consumers reading from the replica in their own zone, and says what it asks of brokers and of clients
- Proposes routing service calls to their own zone first, and names what happens when one zone runs short of capacity
- Puts figures on it: about $5,800 a month removable, $3,800 a month kept
- Notes that a replica in the consumer's zone can be slightly behind the leader, and asks whether any consumer needs the newest records immediately
- Names where one zone is the right answer — development, staging, reprocessing that can be run again — and says why
- Asks what an hour without usage ingestion costs the business, so the $3,800 is weighed against something
- Answers finance in terms of what the money buys, not in broker vocabulary
Follow-up questions
- If that zone fails at ten on a Tuesday morning, what stops, and what is lost?
- Which of the 480 TB is the price of surviving a zone, and which is not?
- How does a consumer in one zone read from a replica in the same zone, and what does it give up?
- Is there anywhere in this estate you would accept a single zone?
- What sentence do you say to finance?
Three more years
What this section is for
Purpose
Commitments are architecture decisions with the longest tail on the bill. The pack already contains one that went wrong, and finance is about to sign the next.
Finance also wants to sign a new three-year commitment next week, covering 70% of this month's compute, because it carries the biggest discount on offer. What do you recommend?
What this question is for, and what to listen for
Purpose
Tests whether the candidate treats a discount as a bet on the future shape of the estate, uses the evidence of the last bet, and can say what they would sign rather than only what they would not.
Signals to score
- Says not before the known changes land, because pod requests at 3.1 times usage and the nightly job both inflate this month's compute
- Commits to the floor of expected usage after those changes, not to a share of this month's spend
- Works out the break-even: a commitment at discount d saves money only while more than 1 − d of it is used, and applies that to the existing one at 31%
- Asks whether the existing commitment can be exchanged, resold or applied to other work, and moves anything that can run on the previous family onto it
- Prefers commitment that follows the workload across instance families or regions, and says roughly what that flexibility costs in discount
- Checks the plans for the next three years for anything that moves compute — a second region, a new family, a managed service replacing a self-run one
- Proposes staggering commitments so they do not all end in the same month
- Says who signs, and what they are given to sign
Follow-up questions
- The last three-year commitment is 31% used. What went wrong, and what stops it happening again?
- What does 70% of this month's compute look like after the pods are right-sized?
- At a 40% discount, how much of the commitment has to be used before it saves anything?
- Is anything planned in the next three years that would move this compute?
- What would you sign next week, if anything?
Before the next bill
What this section is for
Purpose
Closes the round by moving cost from the bill to the design. Every charge in the pack was predictable from a data path; nobody drew it with prices on.
None of these charges surprised the provider. What should the next design review here have to show, so that they stop surprising us?
What this question is for, and what to listen for
Purpose
Tests whether the candidate makes cost an input to design decisions rather than an output someone reads a month later, and keeps the practice light enough that teams actually follow it.
Signals to score
- Asks for a data-flow drawing that marks every billable boundary a byte crosses — NAT, zone, region, internet — with the expected volume on each
- Wants a cost estimate in the design with its traffic assumptions written beside it, not only the price of the instances
- Proposes a unit cost the business recognises — per tenant, per million usage events — and follows it over time
- Gives every line of the bill an owner through account boundaries or tags, and says which is more reliable
- Alerts on unit cost or on one line's change rather than only on the monthly total
- Compares the estimate with the actual bill a month after launch, so estimates get better
- Keeps the review short enough that teams will do it without being chased
Follow-up questions
- Which design document would have predicted the NAT line?
- Tags are never complete. What do you do about that?
- What unit cost would you put in front of the leadership team, and who watches it?
- How would you know whether a design's cost estimate was right?
That's the exercise. What would you want to know about how cost decisions get made here? I'll answer anything — who approves a commitment, what the last surprise on our bill was, whether anyone owns a unit cost.
What this section is for
Purpose
A candidate who has lived with a bill asks who signs commitments and who owns the lines; one who has only optimised a bill asks which cost tool we use. The topics offered make their choice the signal.
One thing that is true of us: [name one real cost decision you would not repeat — a commitment nobody uses, a data path that bills every night, a line on the bill nobody owns]. It is on the bill you would inherit.
What this section is for
Purpose
A specific, unflattering fact tells the candidate this round is looking for exactly what they would walk into, and warns off one who wants the spend already under control. Say it only if it is still true.
Cloud Architect interviews — common questions
- Who is this Cloud Architect interview plan for?
- It is written for the interviewer, not the candidate: the hiring manager, engineer or panel member running the Cost review — last month's bill round for a Cloud Architect role. It gives you a 60 min script to follow in the conversation — 4 questions with what each one is for and the signals to score against — so you are not writing the round from scratch the night before.
- What does the Cost review — last month's bill round assess?
- This round is focused on: Cloud cost optimisation from a real monthly bill: finding the design decisions behind NAT and cross-zone charges, keeping the spend that buys resilience, pricing a three-year commitment before anyone signs it, and making cost visible in a design before it reaches the bill.. It works through Reading the bill, The price of a zone, Three more years and Before the next bill, scoring against 34 observable signals, with follow-up prompts on all 4 questions for going deeper where an answer is thin.
- How is the 60 min split up?
- Reading the bill (22 min), The price of a zone (14 min), Three more years (14 min), Before the next bill (10 min). The timings are there so the round stays on schedule and every candidate gets the same shape of interview — which is what makes two candidates comparable afterwards.
- What other rounds should I run for a Cloud Architect?
A single round does not cover a whole role. The other rounds in this library for a Cloud Architect: