Sr Azure Infrastructure Architect

ROLE: SENIOR AZURE INFRASTRUCTURE ARCHITECT

Location:HERNDON,VA (Hybrid)

OVERALL EXPEREINCE 12YRS+

Job Summary

We are seeking an experienced Azure Infrastructure Architect to design, implement, and manage secure, scalable, highly available, and cost-effective cloud infrastructure solutions on Microsoft Azure. The ideal candidate will have strong expertise in Azure architecture, cloud migration, networking, identity and access management, security, infrastructure automation, disaster recovery, and hybrid cloud environments.

The candidate will work closely with application architects, cloud engineers, DevOps teams, security teams, and business stakeholders to develop enterprise-grade infrastructure solutions aligned with organizational standards and business requirements.

Key Responsibilities

• Design and implement enterprise-scale Azure infrastructure architectures, including landing zones, subscriptions, resource groups, and management groups.
• Architect and manage Azure compute, storage, networking, and hybrid cloud solutions.
• Design Azure Virtual Networks (VNets), subnets, Network Security Groups (NSGs), Azure Firewall, Application Gateway, Load Balancer, VPN Gateway, and ExpressRoute.
• Develop cloud migration strategies for migrating on-premises infrastructure and workloads to Azure.
• Design and implement high availability, business continuity, backup, and disaster recovery solutions using Azure Availability Zones, Azure Backup, and Azure Site Recovery.
• Implement security best practices using Microsoft Entra ID, Azure RBAC, Managed Identities, Key Vault, Microsoft Defender for Cloud, and Azure Policy.
• Define and implement Infrastructure as Code (IaC) using Terraform, Bicep, or ARM templates.
• Collaborate with DevOps teams to integrate infrastructure provisioning into CI/CD pipelines using Azure DevOps or GitHub Actions.
• Establish cloud governance, resource tagging, policy enforcement, monitoring, and cost optimization strategies.
• Implement monitoring, logging, alerting, and performance management using Azure Monitor, Log Analytics, and Application Insights where applicable.
• Design and manage hybrid cloud connectivity between Azure and on-premises data centers.
• Conduct infrastructure assessments, capacity planning, performance tuning, and architecture reviews.
• Develop architecture diagrams, technical specifications, deployment standards, operational procedures, and documentation.
• Provide technical leadership, mentor cloud engineers, and guide teams on Azure architecture best practices.
• Ensure compliance with enterprise security requirements and applicable regulatory standards.

Required Technical Skills

Azure landing zones, Terraform, Azure networking (ExpressRoute/VPN), Entra ID security, disaster recovery, and enterprise cloud migration.

Mandatory Skills:

• Azure Landing Zones – Design and implementation
• Azure Networking – Express route/VPN, Hub-and-Spoke, Peering, Private Endpoints, DNS, and Routing
• Terraform
• Azure Infrastructure Architecture
• Azure Subscription & Management Group Strategy
• Multi-Tenant Azure Architecture
• Azure Governance, Security & RBAC
• Excellent Communication Skills – Mandatory

Important: Architecture-focused candidates only. No DevOps Engineers or DevOps Leads.or Engineer.