This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
As a Cloud Infrastructure Solution Architect, you will be a dedicated specialist within our Enterprise Technology Services (ETS) team. Your mission is to bridge the gap between high-level domain architecture and technical engineering, ensuring our cloud foundations are secure, scalable, and interconnected.
Job Responsibility
Design Cross-Tenant Connectivity: Lead the architectural design for networking between global tenants (including UK, EU, and partner networks), managing hub-spoke topologies, VNet peering, and private endpoints
Translate Architecture to Engineering: Work alongside Domain SAs to own the infrastructure layer of solution designs. You will translate logical architectures into engineer-ready specs, including topology diagrams, deployment architectures, and NFRs
Architect Identity & Access: Design "identity-in-from-the-start" solutions using Entra ID (formerly Azure AD), managed identities, RBAC, and conditional access policies
Security-by-Design: Apply Zero Trust principles and threat modelling at the infrastructure layer, ensuring all designs align with security policies while enabling rapid delivery
Govern Environment Patterns: Define and maintain standard Azure environment patterns, landing zone templates, and resource tagging conventions to ensure engineering consistency
Legacy Infrastructure Assessment: Evaluate the infrastructure dependencies of critical legacy systems, identifying risks and defining technical requirements for modernisation or migration
Delivery Shepherding & Scoping: Act as a technical conduit for delivery partners, pre-consulting on infrastructure tickets to ensure they are correctly scoped and reducing rework
Practice Integration: Participate in Design Authority and review gates, ensuring infrastructure design input is captured before build commences
Cost & Operational Optimisation: Design for supportability and efficiency, assessing the run-cost implications of Azure service choices (e.g., Service Bus vs Event Grid) and infrastructure sizing
Requirements
7-10 years in IT architecture, with a heavy focus on cloud infrastructure, networking, and security implementation
Deep Azure Expertise: Expert-level knowledge of Azure network design (hub-spoke, DNS resolution, ingress/egress patterns) and platform services (Functions, Container Apps, Cosmos DB)
Identity Mastery: Proven experience with Entra ID, service principal governance, and Key Vault patterns in a complex enterprise environment
Technical Translation Skills: The ability to take a high-level business solution and produce detailed infrastructure diagrams and specifications that engineers can act on without ambiguity
Security Mindset: Practical experience with Tenable or similar vulnerability management tools, and a strong understanding of encryption and infrastructure-level security controls
Hybrid & Cross-Tenant Experience: Specific experience managing connectivity and identity across multiple distinct cloud tenants and legacy on-premise environments
Collaborative Influence: Experience working within an embedded architecture practice, influencing both application architects and engineering leads
Infrastructure as Code (IaC): Familiarity with Terraform, Bicep, or ARM templates to support automated, repeatable patterns
Education & Certification: Bachelor’s degree in Computer Science or IT. Relevant certifications (e.g., Azure Solutions Architect Expert, AZ-700 Network Engineer, or TOGAF) are highly regarded
What we offer
Inclusive company with team culture
Great Place To Work® certified
Equal Opportunity Employer
Individualised Learning & Development pathway options
Access to 'LinkedIn Learning' for ongoing skills development
Exclusive Staff Discounts via employee-only portal with 350+ Australia retailers
Health and wellness discounts
Financial planning advice
Employee share plan
Travel Discounts for family and friends
Career opportunities in a network of brands globally
Corporate Health Discounts with BUPA
Access to internal gym
Mental Health Support and Employee Assistance Program
Regular awards nights
Social team-building and industry events
Opportunity to attend global conferences (Bangkok in 2026)