Azure Cloud Infrastructure Architect with hub-and-spoke

Role : Azure Cloud Infrastructure Architect

Location : Dublin, CA - Hybrid

Duration: 6+ month

Experience: 10 + year

Rate :  $70 - $80

Job Summary

 We are seeking a highly experienced Azure Cloud Infrastructure Architect to lead the design, governance, security, and implementation of

enterprise-scale Azure platforms. The role requires deep expertise in Azure networking, hub-and-spoke

architectures, landing zones, hybrid connectivity, security controls, DNS, routing, and infrastructure

automation. The architect will define cloud standards, provide technical leadership, and drive large-scale

cloud transformation initiatives. Key Responsibilities Azure Platform & Landing Zone Architecture Design

and implement enterprise Azure Landing Zones, management groups, subscriptions, and governance

frameworks. Define Azure architectural standards, naming conventions, tagging strategies, RBAC

models, and policy guardrails. Establish multi-environment and multi-subscription architectures for

large-scale enterprise deployments. Networking & Connectivity Architecture Design Azure Hub-and Spoke network topologies with centralized connectivity and security services. Architect Virtual Networks

(VNets), subnet segmentation, VNet Peering, UDRs, NSGs, ASGs, and routing policies. Design hybrid

connectivity using ExpressRoute, Site-to-Site VPN, and BGP routing. Define DNS architecture using Azure

Private DNS, conditional forwarding, split-brain DNS, and hybrid name resolution. Troubleshoot complex

networking issues including routing loops, DNS failures, connectivity bottlenecks, and asymmetric

routing. Security Architecture Implement Zero Trust security architecture across Azure environments.

Design Azure Firewall, WAF, DDoS Protection, Private Endpoints, Bastion, and network segmentation

strategies. Define Microsoft Entra ID integration, Conditional Access, PIM, RBAC, and identity

governance controls. Implement Azure Policy, Defender for Cloud, Key Vault, and compliance

enforcement frameworks. Infrastructure & Compute Architecture Architect Azure IaaS and PaaS

solutions including: Virtual Machines VM Scale Sets AKS Application Gateway Load Balancers Azure

Storage Azure SQL Design high-availability, disaster recovery, backup, and cross-region failover

solutions. Automation & Platform Engineering Lead Infrastructure as Code initiatives using Terraform,

Bicep, and ARM templates. Develop reusable infrastructure modules, CI/CD pipelines, and automated

deployment frameworks. Drive DevSecops practices including security scanning, compliance validation,

and policy-as-code implementation. Operations, Governance & FinOps Define monitoring and

observability frameworks using Azure Monitor, Log Analytics, Application Insights, and Network

Watcher. Establish cloud governance processes, architecture reviews, operational readiness reviews,

and cloud standards. Drive FinOps initiatives including cost optimization, budgeting, resource utilization

analysis, and chargeback models. Required Technical Skills Azure Landing Zones (CAF) Hub-and-Spoke

Network Design Azure Virtual WAN VNet Peering NSG / ASG Azure Firewall Premium UDR & BGP Routing

ExpressRoute & Site-to-Site VPN Azure DNS & Private DNS Zones Azure Application Gateway & WAF

Azure Front Door Microsoft Entra ID Azure Policy & Defender for Cloud AKS & Container Networking

Terraform / Bicep Azure DevOps Disaster Recovery & Business Continuity Network Security & Zero Trust

Architecture Preferred Experience 10+ years in Infrastructure/Cloud Engineering. 5+ years designing

enterprise Azure platforms. Experience with large-scale migrations, cloud networking, and platform

governance. Azure Solutions Architect Expert certification preferred. Resume-Grade One-Liner Lead the

architecture and governance of enterprise Azure platforms, specializing in Azure Landing Zones, Hub-

and-Spoke networking, NSG/Firewall design, DNS and routing architecture, hybrid connectivity, security

governance, Infrastructure as Code, and highly available cloud infrastructure solutions

About Aspire Systems

Aspire Systems is a $180+ million global technology services firm with over 4,900 employees worldwide, partnering with 275+ active customers. Founded in 1996, Aspire has grown steadily at a 19% CAGR since 2020.

Headquartered in Singapore, we operate across the US, UK, LATAM, Europe, the Middle East, India, and Asia Pacific regions, with strong nearshore delivery centers in Poland and Mexico. Aspire has been consistently recognized among India’s 100 Best Companies to Work For for 12 consecutive years by the Great Place to Work Institute.

Who We Are

Aspire is built on deep expertise in Software Engineering, Digital Services, Testing, and Infrastructure & Application Support. We serve diverse industries including Independent Software Vendors, Retail, Banking & Financial Services, and Insurance.

Our proven frameworks and accelerators enable us to create future-ready, scalable, and business-focused systems, helping customers across the globe embrace digital transformation at speed and scale.

Why Join Aspire Systems

Being an Aspirian means being part of a future-ready, global workplace where you will work on emerging technologies, collaborate with diverse teams, and contribute to meaningful digital transformation initiatives.

We foster innovation, value diverse perspectives, and enable continuous learning and career growth — guided by our philosophy of “Attention. Always.” Aspire also follows a hybrid work model, promoting flexibility, collaboration, and work-life balance. Learn more about Life at Aspire:

Our Commitment to Diversity & Inclusion

At Aspire Systems, we foster a work culture that appreciates diversity and inclusiveness. We understand that our multigenerational workforce represents different regions, cultures, economic backgrounds, races, genders, ethnicities, education levels, personalities, and religions. We believe these differences make us stronger and are committed to building an inclusive workplace where everyone feels respected and valued.

Privacy Notice

Aspire Systems values your privacy. Candidate information collected through this recruitment process will be used solely for hiring purposes, handled securely, and retained only as long as necessary in compliance with applicable privacy laws.

Disclaimer

The above statements are not intended to be a complete statement of job content, but rather to serve as a guide to the essential functions performed by the employee in this role. Management retains the discretion to add or change the duties of the position at any time