OVERVIEW

We are seeking a certified and experienced Azure Cloud Architect/Engineer to lead the design and implementation of enterprise-scale landing zones within a third-party-managed Azure tenant.
The role involves close collaboration with an infrastructure partner responsible for the hub network, and includes responsibility for spoke landing zones, hybrid connectivity, and secure service integration.

QUALIFICATIONS

• BS/MS degree in Computer Science, Engineering or a related subject
• Microsoft Certified: Azure Solutions Architect Expert (or equivalent).

ESSENTIAL SKILLS

• Proven experience with Azure enterprise-scale landing zones in a hub-and-spoke model.
• Strong understanding of working within a partner-managed Azure environment.
• Deep expertise in Azure networking and security services.
• Experience deploying and managing Azure API Management (APIM) in hybrid scenarios.
• Proficiency in scripting and automation (PowerShell, Azure CLI, Bicep).
• Familiarity with hybrid identity and DNS integration.
• Good Client-facing and communication skills
• Proven capability to clearly and persuasively present complex information to senior stakeholders(Including C-Suite)
• People management skills - introducing and building ways in which people can learn from each other, encouraging mentoring and the transfer of knowledge by designing and delivering learning interventions
• Team work and emotional intelligence
• Good self-management – continuous performance is both an objective and a mind-set

EXPERIENCE

• Experience of leading a team.

• Design and implement spoke landing zones in accordance with Microsoft’s Cloud Adoption Framework (CAF) and enterprise-scale architecture principles.
• Collaborate with the infrastructure partner managing the Azure tenant and hub to ensure seamless integration and compliance with shared services and policies.
• Lead the deployment and configuration of Azure API Management (APIM), including hybrid and internal integration scenarios.
• Design secure and scalable network architectures using Azure Firewall, Application Gateway, NSGs, DNS, and route tables.
• Implement and manage ExpressRoute connectivity to on-premises environments, ensuring high availability and secure integration.
• Automate infrastructure provisioning using Infrastructure as Code (IaC) tools such as Bicep, ARM templates, or Terraform.
• Provide architectural guidance and technical leadership to internal teams and stakeholders, including defining standards and policies.