Infrastructure Architect

Stallion Infrastructure Services•Houston, TX

8d•Onsite

About The Position

The Infrastructure Architect designs, implements, and operates Stallion’s hybrid IT infrastructure, with a primary focus on Microsoft Azure. The role owns cloud architecture across production, development, and disaster recovery environments, as well as the network security, identity, backup, and connectivity services the business relies on. The Infrastructure Architect leads modernization initiatives from evaluation through production operation, independently resolves complex technical issues across multiple layers, and works with internal teams and external vendors to deliver reliable, secure, and cost-effective infrastructure. This position reports to the Director of Technology and is an in-office role located in Houston, Texas. The role also provides Level 3 support, participates in proofs of concept, selects and implements security tools and policies, documents infrastructure and security findings, and plans and tracks work through a formal project management process. Occasional after-hours and weekend work may be required during maintenance windows. Other related duties may be assigned.

Requirements

Deep hands-on experience designing and operating Microsoft Azure infrastructure, including networking, compute, storage, and identity (Entra ID and RBAC).
Working knowledge of Azure platform services, cost management, monitoring, and governance.
Solid understanding of firewall and network security concepts, including stateful inspection, policy design, NAT, high availability, and IPsec/SSL VPN.
Thorough understanding of networking protocols and concepts, including TCP/IP, the OSI model, DNS, DHCP, BGP, VLANs, and 802.1X.
Ability to independently identify root causes of complex, multi-layered issues across cloud, network, operating system, and application layers.
Thorough knowledge of Windows Server and Active Directory in a multi-domain-controller environment; Linux administration experience.
Strong PowerShell scripting skills and comfort with command-line tools and APIs.
Experience with backup, replication, and disaster recovery platforms, and with designing for high availability.
Experience with virtualization and migrating workloads from on-premises environments to the cloud.
Track record of owning infrastructure projects end-to-end and leading replacement of legacy platforms.
Ability to manage and escalate issues to external vendors and coordinate vendor technicians at Stallion locations.
Ability to collaborate with internal teams to diagnose problems and present resolutions.
Ability to create change management processes and follow procedures to ensure high availability.
Ability to work independently and complete assignments within provided instructions, routines, and accepted practices.
Ability to work in a team environment.
Applicants must possess valid identification.
Applicants must pass a pre-employment drug screening.
Applicants must possess a clean criminal history.

Nice To Haves

Bachelor’s degree in Computer Science or a related discipline preferred.
Microsoft Azure certifications, such as AZ-104, AZ-305, or AZ-500, preferred.
Fortinet experience, such as FortiGate, FortiManager, or FortiClient EMS, and/or Fortinet NSE certifications.
Experience with enterprise backup and disaster recovery or replication platforms, such as Commvault, Veeam, or Zerto.
Exposure to integration middleware or AI platform infrastructure, such as Azure AI Foundry.
Experience with UCaaS administration and physical site network buildouts.
Python scripting and Azure DevOps or similar work-tracking experience.

Responsibilities

Design, build, and maintain Microsoft Azure infrastructure, including virtual networking, compute, storage, and platform services.
Own cloud architecture across Azure regions and production, development, and disaster recovery environments, applying consistent design standards.
Design and deploy Azure managed services, including high availability and disaster recovery decisions.
Provide infrastructure for business-critical integration and AI platforms, including private endpoints, DNS, and access controls.
Optimize Azure costs through reservations, right-sizing, and capacity planning.
Administer Microsoft Entra ID and Azure role-based access control, including custom roles, application registrations, SSO integrations, and MFA.
Maintain on-premises Active Directory, DNS, and DHCP in a multi-domain-controller environment, including replication health and role placement.
Design and administer firewall and network security infrastructure across corporate, datacenter, and field locations, including firewall policy, high availability, VPN, SD-WAN, and routing.
Architect and maintain disaster recovery capabilities, including cross-region replication, failover design, and periodic testing.
Ensure backup coverage for server and cloud workloads, and oversee endpoint security, vulnerability management, and SIEM integration.
Lead migrations and modernization initiatives, including on-premises-to-cloud migrations, legacy platform retirement, and evaluation and replacement of aging tools.
Support site openings, closures, and acquisitions, including network buildouts, circuit provisioning, telephony (UCaaS), and integration into company standards.
Maintain recurring security and operations activities, including patching, emergency remediation, firmware upgrades, credential rotation, certificate and license renewals, and device compliance.
Manage infrastructure vendors and contracts, including licensing renewals, ISP and circuit providers, and third-party security assessments and remediation.
Create and maintain documentation of infrastructure architecture, network configurations, standard procedures, and security findings.
Develop scripts and automation using tools such as PowerShell, Azure CLI, and REST APIs to reduce recurring manual work.
Plan and track infrastructure work through a formal project management process, such as sprint planning and backlog management.
Provide Level 3 troubleshooting and support to resolve issues.
Participate in proofs of concept to help define technology direction and enable business strategy.
Select and implement security tools, policies, and procedures to enforce system standards.
Perform occasional after-hours and weekend work during maintenance windows.
Perform other related duties as assigned.