Title: Azure Infrastructure Architect
Location: Remote
Job Description Azure Infrastructure Architect (Enterprise Cloud Platform)
Primary Focus
Enterprise Azure architecture, Landing Zone governance, platform standards, solution design and technical leadership.
Role Overview
seeking an experienced Azure Infrastructure Architect to lead the architecture, governance and implementation of enterprise-scale Azure cloud platforms supporting digital tools, AI-enabled services, automation platforms and modern applications. The role will define Azure architecture standards, Landing Zone alignment, governance guardrails, security baselines, networking, high availability, disaster recovery, cost optimization and operational readiness while providing technical leadership across delivery teams.
Key Responsibilities
- Design end-to-end Azure reference architectures for digital tools, AI workloads, automation platforms, application hosting and enterprise integrations.
- Define Azure Landing Zone architecture including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, naming standards, tagging and governance.
- Lead architecture for compute, networking, storage, databases, AI services, AKS, App Services, Functions, Azure Virtual Desktop and platform services.
- Define hybrid connectivity architecture including VNets, Subnets, NSGs, Private Endpoints, Private DNS, ExpressRoute, VPN, Azure Firewall, Application Gateway and Front Door.
- Define enterprise identity architecture using Microsoft Entra ID, Managed Identities, Service Principals and Key Vault integration.
- Establish Infrastructure-as-Code standards using Terraform, Bicep and ARM Templates.
- Perform infrastructure sizing, capacity planning, HA/DR design, backup strategy, resilience reviews and production readiness assessments.
- Provide technical leadership to Azure, Network, Security, DevOps, Application and Data Engineering teams.
- Review solution designs against Microsoft Cloud Adoption Framework, Azure Well-Architected Framework and enterprise security standards.
- Drive FinOps practices including Azure Cost Management, budgets, tagging strategy, rightsizing and governance.
- Produce architecture documents, HLDs, LLD reviews, decision records, deployment blueprints and operational standards.
- Identify technical risks, architectural dependencies and mitigation plans throughout implementation.
Required Technical Skills
- Azure Landing Zones, Cloud Adoption Framework (CAF) and Azure Well-Architected Framework
- Management Groups, Azure Policy, RBAC, Resource Graph, Azure Governance and Cost Management
- Azure VMs, App Services, Azure Functions, AKS, Azure Container Registry, Azure Virtual Desktop
- Azure SQL, PostgreSQL Flexible Server, Storage Accounts, ADLS Gen2, Azure AI Search, Redis Cache, Event Hubs, Data Factory
- Azure OpenAI, AI Foundry/AI Studio, Document Intelligence and AI platform architecture
- VNets, NSGs, UDRs, Private Endpoints, Private DNS, Azure Firewall, Application Gateway, Front Door, ExpressRoute and VPN
- Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, Azure Backup
- Terraform, Bicep, ARM Templates, Azure DevOps and Git-based deployment practices
Qualifications & Experience
- 12+ years of IT infrastructure, cloud architecture or enterprise technology experience.
- 5+ years designing enterprise Azure platforms and Landing Zones.
- Experience delivering AI, automation, cloud-native and application modernization initiatives.
- Strong architecture governance, stakeholder management and technical leadership skills.
Preferred Certifications
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Azure DevOps Engineer Expert (AZ-400) Preferred
- TOGAF certification or equivalent enterprise architecture experience Preferred
Professional Competencies
- Executive communication and stakeholder management
- Architecture governance and decision making
- Structured problem solving
- Cross-functional leadership
- Technical mentoring and knowledge transfer