Azure Infrastructure Architect

• Design and architect comprehensive Azure infrastructure solutions aligned to the Well-Architected Framework, Cloud Adoption Framework, and Azure Landing Zone best practices for enterprise customers
• Implement and deploy the solutions you architect, working hands-on with Azure services to ensure designs translate effectively into production environments
• Produce detailed solution pricing, scope documents, and cost estimates for customer proposals, working closely with pre-sales teams to position technical solutions commercially
• Lead technical discovery sessions, workshops, and architecture review boards with senior stakeholders at customer organisations
• Develop and maintain Infrastructure as Code using Terraform, Bicep, and PowerShell, including CI/CD pipeline implementation, automated testing frameworks, and secure secret management practices
• Design and implement identity and access management solutions using Microsoft Entra ID, including identity governance, conditional access policies, Privileged Identity Management, SSO, and B2B/B2C scenarios
• Deploy and configure the Microsoft Defender suite across customer environments, including Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel
• Architect and implement core Azure networking solutions including virtual networks, ExpressRoute and VPN connectivity, Azure Firewall, network security groups, load balancers, and hybrid connectivity patterns
• Delegate tasks effectively to junior and mid-level engineers, providing technical mentorship and ensuring delivery quality across the team
• Manage multiple concurrent customer projects, ensuring solutions are delivered to scope, timeline, and budget whilst maintaining high technical standards
• Produce customer-facing technical documentation, including high-level designs (HLD), low-level designs (LLD), architecture diagrams, and runbooks
• Stay current with Azure platform developments, new services, and evolving best practices, sharing knowledge with the wider technical team
• Collaborate with account managers and business development teams to identify expansion opportunities within existing customer accounts
• Conduct proof-of-concept work to validate architectural approaches and demonstrate value to prospective customers
• Cost up solutions using the Azure pricing calculator with options for PAYG, Reserved Instances and Savings Plan

• Minimum 5 years' hands-on experience designing and implementing Azure infrastructure solutions in enterprise environments
• At least 8 years' overall experience in IT infrastructure engineering, architecture, or consultancy roles
• Strong Infrastructure as Code skills with Terraform, Bicep, and PowerShell, including experience with testing frameworks (Terratest, Pester), CI/CD integration, and secret management using Azure Key Vault or HashiCorp Vault
• Deep technical knowledge of Azure core networking and compute services: virtual networks, ExpressRoute, site-to-site VPN, Azure Firewall, network security groups, Azure Load Balancer, Application Gateway, virtual machines, storage accounts, virtual machine scale sets, and Azure Virtual Desktop
• Strong expertise in Microsoft Entra ID including identity governance, conditional access policies, Privileged Identity Management (PIM), single sign-on (SSO), multi-factor authentication, and B2B/B2C identity scenarios
• Strong knowledge of the Microsoft Defender suite: Defender for Cloud (formerly Security Center), Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel for security information and event management
• Proven ability to architect end-to-end solutions and produce accurate customer-facing pricing estimates, proposals, and statements of work
• Demonstrated experience applying Well-Architected Framework principles, Cloud Adoption Framework methodologies, and Azure Landing Zone reference architectures
• Excellent communication and presentation skills with the ability to engage confidently with senior technical and business stakeholders
• Experience managing multiple concurrent projects, prioritising effectively, and delegating work to engineering teams
• Previous experience working within a Microsoft Partner, systems integrator, or technology consultancy environment

• Experience with Azure VMware Solution (AVS) or Azure migration tooling including Azure Migrate and Azure Site Recovery
• Knowledge of Azure Policy, Azure Blueprints, and governance at scale across multi-subscription environments
• Familiarity with Azure Kubernetes Service (AKS), container orchestration, and containerised workload patterns
• Understanding of FinOps practices and Azure Cost Management for cost optimisation and financial governance
• Experience designing and implementing CI/CD pipelines using Azure DevOps or GitHub Actions
• Knowledge of Azure Arc for hybrid and multi-cloud infrastructure management
• Experience integrating Microsoft 365 and Microsoft Intune with Azure infrastructure solutions
• Proficiency with monitoring and observability tooling including Azure Monitor, Log Analytics, and Application Insights
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Azure Network Engineer Associate (AZ-700)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: DevOps Engineer Expert (AZ-400)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Flexible remote working arrangements that support work-life balance