Azure Cloud Infrastructure Architect with hub-and-spoke

Dublin, CA, US • Posted 20 hours ago • Updated 20 hours ago
Contract W2
6 Months
No Travel Required
On-site
$70 - $80/hr
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Azure networking
  • DNS
  • hub-and-spoke
  • Azure Landing Zones
  • Firewall
  • NSG

Summary

Role : Azure Cloud Infrastructure Architect
Location : Dublin, CA - Hybrid
Duration: 6+ month
Experience: 10 + year
Rate :  $70 - $80
 
Job Summary
 We are seeking a highly experienced Azure Cloud Infrastructure Architect to lead the design, governance, security, and implementation of
enterprise-scale Azure platforms. The role requires deep expertise in Azure networking, hub-and-spoke
architectures, landing zones, hybrid connectivity, security controls, DNS, routing, and infrastructure
automation. The architect will define cloud standards, provide technical leadership, and drive large-scale
cloud transformation initiatives. Key Responsibilities Azure Platform & Landing Zone Architecture Design
and implement enterprise Azure Landing Zones, management groups, subscriptions, and governance
frameworks. Define Azure architectural standards, naming conventions, tagging strategies, RBAC
models, and policy guardrails. Establish multi-environment and multi-subscription architectures for
large-scale enterprise deployments. Networking & Connectivity Architecture Design Azure Hub-and Spoke network topologies with centralized connectivity and security services. Architect Virtual Networks
(VNets), subnet segmentation, VNet Peering, UDRs, NSGs, ASGs, and routing policies. Design hybrid
connectivity using ExpressRoute, Site-to-Site VPN, and BGP routing. Define DNS architecture using Azure
Private DNS, conditional forwarding, split-brain DNS, and hybrid name resolution. Troubleshoot complex
networking issues including routing loops, DNS failures, connectivity bottlenecks, and asymmetric
routing. Security Architecture Implement Zero Trust security architecture across Azure environments.
Design Azure Firewall, WAF, DDoS Protection, Private Endpoints, Bastion, and network segmentation
strategies. Define Microsoft Entra ID integration, Conditional Access, PIM, RBAC, and identity
governance controls. Implement Azure Policy, Defender for Cloud, Key Vault, and compliance
enforcement frameworks. Infrastructure & Compute Architecture Architect Azure IaaS and PaaS
solutions including: Virtual Machines VM Scale Sets AKS Application Gateway Load Balancers Azure
Storage Azure SQL Design high-availability, disaster recovery, backup, and cross-region failover
solutions. Automation & Platform Engineering Lead Infrastructure as Code initiatives using Terraform,
Bicep, and ARM templates. Develop reusable infrastructure modules, CI/CD pipelines, and automated
deployment frameworks. Drive DevSecops practices including security scanning, compliance validation,
and policy-as-code implementation. Operations, Governance & FinOps Define monitoring and
observability frameworks using Azure Monitor, Log Analytics, Application Insights, and Network
Watcher. Establish cloud governance processes, architecture reviews, operational readiness reviews,
and cloud standards. Drive FinOps initiatives including cost optimization, budgeting, resource utilization
analysis, and chargeback models. Required Technical Skills Azure Landing Zones (CAF) Hub-and-Spoke
Network Design Azure Virtual WAN VNet Peering NSG / ASG Azure Firewall Premium UDR & BGP Routing
ExpressRoute & Site-to-Site VPN Azure DNS & Private DNS Zones Azure Application Gateway & WAF
Azure Front Door Microsoft Entra ID Azure Policy & Defender for Cloud AKS & Container Networking
Terraform / Bicep Azure DevOps Disaster Recovery & Business Continuity Network Security & Zero Trust
Architecture Preferred Experience 10+ years in Infrastructure/Cloud Engineering. 5+ years designing
enterprise Azure platforms. Experience with large-scale migrations, cloud networking, and platform
governance. Azure Solutions Architect Expert certification preferred. Resume-Grade One-Liner Lead the
architecture and governance of enterprise Azure platforms, specializing in Azure Landing Zones, Hub-
and-Spoke networking, NSG/Firewall design, DNS and routing architecture, hybrid connectivity, security
governance, Infrastructure as Code, and highly available cloud infrastructure solutions
 
About Aspire Systems
Aspire Systems is a $180+ million global technology services firm with over 4,900 employees worldwide, partnering with 275+ active customers. Founded in 1996, Aspire has grown steadily at a 19% CAGR since 2020.
Headquartered in Singapore, we operate across the US, UK, LATAM, Europe, the Middle East, India, and Asia Pacific regions, with strong nearshore delivery centers in Poland and Mexico. Aspire has been consistently recognized among India’s 100 Best Companies to Work For for 12 consecutive years by the Great Place to Work Institute.
 
Who We Are
Aspire is built on deep expertise in Software Engineering, Digital Services, Testing, and Infrastructure & Application Support. We serve diverse industries including Independent Software Vendors, Retail, Banking & Financial Services, and Insurance.
Our proven frameworks and accelerators enable us to create future-ready, scalable, and business-focused systems, helping customers across the globe embrace digital transformation at speed and scale.
Why Join Aspire Systems
Being an Aspirian means being part of a future-ready, global workplace where you will work on emerging technologies, collaborate with diverse teams, and contribute to meaningful digital transformation initiatives.
We foster innovation, value diverse perspectives, and enable continuous learning and career growth — guided by our philosophy of “Attention. Always.” Aspire also follows a hybrid work model, promoting flexibility, collaboration, and work-life balance. Learn more about Life at Aspire:
Our Commitment to Diversity & Inclusion
 
At Aspire Systems, we foster a work culture that appreciates diversity and inclusiveness. We understand that our multigenerational workforce represents different regions, cultures, economic backgrounds, races, genders, ethnicities, education levels, personalities, and religions. We believe these differences make us stronger and are committed to building an inclusive workplace where everyone feels respected and valued.
 
Privacy Notice
Aspire Systems values your privacy. Candidate information collected through this recruitment process will be used solely for hiring purposes, handled securely, and retained only as long as necessary in compliance with applicable privacy laws.
Disclaimer
The above statements are not intended to be a complete statement of job content, but rather to serve as a guide to the essential functions performed by the employee in this role. Management retains the discretion to add or change the duties of the position at any time
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 91118478
  • Position Id: 9108780
  • Posted 20 hours ago
Contact the job poster
JV

Jayaraj Velusamy

Recruiter @ Aspire Systems Digital Transformation Inc
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Hybrid in Milpitas, California

•

Today

Easy Apply

Contract

Depends on Experience

Milpitas, California

•

Today

Full-time, Third Party

$120000 - $130000

Remote

•

3d ago

Easy Apply

Full-time

Depends on Experience

Remote

•

22d ago

Easy Apply

Full-time

220,000 - 240,000

Search all similar jobs