Azure Infrastructure Architect

Ampcus Inc.•Nyc, NY

1d•Remote

About The Position

Enterprise Cloud Platform Primary Focus Enterprise Azure architecture, Landing Zone governance, platform standards, solution design, and technical leadership. Role Overview Seeking an experienced Azure Infrastructure Architect to lead the architecture, governance, and implementation of enterprise-scale Azure cloud platforms supporting digital tools, AI-enabled services, automation platforms, and modern applications. The role will define Azure architecture standards, Landing Zone alignment, governance guardrails, security baselines, networking, high availability, disaster recovery, cost optimization, and operational readiness while providing technical leadership across delivery teams.

Requirements

Azure Landing Zones, Cloud Adoption Framework (CAF), and Azure Well-Architected Framework
Management Groups, Azure Policy, RBAC, Resource Graph, Azure Governance, and Cost Management
Azure VMs, App Services, Azure Functions, AKS, Azure Container Registry, Azure Virtual Desktop
Azure SQL, PostgreSQL Flexible Server, Storage Accounts, ADLS Gen2, Azure AI Search, Redis Cache, Event Hubs, Data Factory
Azure OpenAI, AI Foundry/AI Studio, Document Intelligence, and AI platform architecture
VNets, NSGs, UDRs, Private Endpoints, Private DNS, Azure Firewall, Application Gateway, Front Door, ExpressRoute, and VPN
Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, Azure Backup
Terraform, Bicep, ARM Templates, Azure DevOps, and Git-based deployment practices
12 years of IT infrastructure, cloud architecture, or enterprise technology experience.
5 years designing enterprise Azure platforms and Landing Zones.
Experience delivering AI, automation, cloud-native, and application modernization initiatives.
Strong architecture governance, stakeholder management, and technical leadership skills.

Nice To Haves

Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
Microsoft Certified: Azure Administrator Associate (AZ-104)
Microsoft Certified: Azure DevOps Engineer Expert (AZ-400) – Preferred
TOGAF certification or equivalent enterprise architecture experience – Preferred
Executive communication and stakeholder management
Architecture governance and decision making
Structured problem solving
Cross-functional leadership
Technical mentoring and knowledge transfer

Responsibilities

Design end-to-end Azure reference architectures for digital tools, AI workloads, automation platforms, application hosting, and enterprise integrations.
Define Azure Landing Zone architecture including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, naming standards, tagging, and governance.
Lead architecture for compute, networking, storage, databases, AI services, AKS, App Services, Functions, Azure Virtual Desktop, and platform services.
Define hybrid connectivity architecture including VNets, Subnets, NSGs, Private Endpoints, Private DNS, ExpressRoute, VPN, Azure Firewall, Application Gateway, and Front Door.
Define enterprise identity architecture using Microsoft Entra ID, Managed Identities, Service Principals, and Key Vault integration.
Establish Infrastructure-as-Code standards using Terraform, Bicep, and ARM Templates.
Perform infrastructure sizing, capacity planning, HA/DR design, backup strategy, resilience reviews, and production readiness assessments.
Provide technical leadership to Azure, Network, Security, DevOps, Application, and Data Engineering teams.
Review solution designs against Microsoft Cloud Adoption Framework, Azure Well-Architected Framework, and enterprise security standards.
Drive FinOps practices including Azure Cost Management, budgets, tagging strategy, rightsizing, and governance.
Produce architecture documents, HLDs, LLD reviews, decision records, deployment blueprints, and operational standards.
Identify technical risks, architectural dependencies, and mitigation plans throughout implementation.