Cloud Infrastructure Architect

Job summary

Designs and delivers secure Azure infrastructure foundations for data, analytics, and AI programs, leading technical delivery with client IT, networking, and security teams. Responsibilities include landing zones, governance, hub-and-spoke networking, Terraform or Bicep infrastructure as code, CI/CD, and administration of Microsoft Fabric and Databricks, using technologies such as Azure Policy, ExpressRoute, GitHub Actions, Azure DevOps, and Azure Monitor.

Benefits

Qualifications

• At least 5 years of cloud or enterprise infrastructure engineering or architecture experience, with deep Microsoft Azure expertise.
• Hands-on experience with Azure networking, including hub-and-spoke architectures, ExpressRoute, VPN, private endpoints, private DNS, network security groups, user-defined routes, and firewalls.
• Production experience building infrastructure as code with Terraform or Bicep.
• Experience implementing infrastructure CI/CD with GitHub Actions or Azure DevOps.
• Strong knowledge of Azure governance, Azure Policy, role-based access control, and cost management.
• Experience with Microsoft Entra ID, managed identities, Azure Key Vault, and Microsoft Defender for Cloud.
• Experience supporting infrastructure for Microsoft Fabric, Azure data services, or Databricks.
• Experience with Azure Monitor, Log Analytics, and diagnostic settings.
• Strong understanding of cloud security, private networking, and least-privilege access.
• Client-facing consulting or delivery experience across architecture, advisory, and hands-on implementation.
• Ability to lead technical discussions and troubleshoot complex infrastructure and connectivity issues.
• Strong written and verbal communication skills.

Responsibilities

• Design and deploy Azure subscriptions, landing zones, naming conventions, and tagging standards.
• Establish governance with Azure Policy, budgets, alerts, and FinOps guardrails.
• Implement least-privilege role-based access controls.
• Design hub-and-spoke networks, including virtual networks, subnets, private endpoints, and delegated services.
• Configure hybrid connectivity, firewalls, private DNS, and secure network egress.
• Lead network connectivity testing, troubleshooting, and remediation.
• Develop reusable Terraform modules and infrastructure CI/CD pipelines using GitHub Actions or Azure DevOps.
• Administer Microsoft Fabric capacity, tenant settings, security, and private connectivity.
• Advise on Databricks workspace architecture, Unity Catalog governance, access controls, and CI/CD.
• Configure Azure Key Vault, Microsoft Defender for Cloud, Entra ID security groups, and managed identities.
• Establish monitoring with Azure Monitor, Log Analytics, diagnostic settings, and Fabric capacity metrics.
• Support Azure and Microsoft 365 or Entra tenant migrations and cloud modernization initiatives.
• Lead client architecture sessions, assess environments for risks, and recommend mitigations.
• Coach client teams on Azure infrastructure, security, governance, and operations.
• Support proposals, statements of work, technical estimates, and solution documentation.

Skills

Certifications

Work schedule

Industry

Relocation