Job Description

About the Role

We are looking for an Azure Delivery Architect to lead the design and end-to-end delivery of Azure solutions for enterprise customers. You will own the technical architecture and delivery of complex cloud engagements spanning infrastructure, applications, PaaS, DevOps, security, and networking from engineering team support and solution design through implementation, handover, and operational readiness.

This is a customer-facing, hands-on architecture role. You will translate enterprise requirements into well-architected Azure solutions, lead delivery teams through execution, and act as the trusted technical advisor throughout the project lifecycle

What You Will Do

Solution architecture and desig

• Design end-to-end Azure architectures for enterprise customers covering IaaS, PaaS, application platforms, identity, networking, and security, aligned with the Azure Well Architected Framework and Cloud Adoption Framework.

• Lead landing zone design and implementation: management group hierarchy, subscription strategy, policy and governance (Azure Policy), hub-spoke and Virtual WAN network topologies, and hybrid connectivity (ExpressRoute, VPN)

• Architect application hosting solutions across App Service, AKS, Container Apps, Functions, and supporting PaaS services (SQL, Cosmos DB, Service Bus, API Management, storage, caching).

• Design migration and modernization strategies: assessment, wave planning, rehost/replatform/refactor decisions, and execution using Azure Migrate and related tooling.

• Produce high-quality architecture artifacts: HLDs, LLDs, design decision records, and as built documentation.

Delivery leadership

• Own the technical delivery of Azure projects: plan workstreams, define milestones, manage technical risks and dependencies, and drive engagements to successful completion on time and within scope.

• Lead and coordinate multidisciplinary delivery teams (infrastructure, DevOps, security, application engineers), providing technical direction and quality assurance.

Act as the primary technical point of contact for enterprise customers: run design workshops, present architectures to stakeholders from engineers to CxO level, and manage technical escalations.

• Support pre-sales activities: scoping, effort estimation, solution proposals, SoWs, and technical responses to RFPs.

Infrastructure as Code and DevOps

• Champion an IaC-first delivery approach: design and build reusable Terraform and/or Bicep modules, enforce code review and testing standards, and manage state, environments, and promotion strategies.

• Design and implement CI/CD pipelines using Azure DevOps and/or GitHub Actions for both infrastructure and application workloads, including deployment strategies (blue/green, canary) and release governance.

• Drive automation across provisioning, configuration, patching, and operational tasks (PowerShell, Bash, Python). Security and networking • Embed security by design: Entra ID architecture, RBAC and PIM, managed identities, Key Vault, network segmentation, private endpoints, firewalls (Azure Firewall, NSGs, WAF), and encryption standards.Act as the primary technical point of contact for enterprise customers: run design

workshops, present architectures to stakeholders from engineers to CxO level, and

manage technical escalations.

• Support pre-sales activities: scoping, effort estimation, solution proposals, SoWs, and

technical responses to RFPs.

Infrastructure as Code and DevOps

• Champion an IaC-first delivery approach: design and build reusable Terraform and/or

Bicep modules, enforce code review and testing standards, and manage state,

environments, and promotion strategies.

• Design and implement CI/CD pipelines using Azure DevOps and/or GitHub Actions for

both infrastructure and application workloads, including deployment strategies

(blue/green, canary) and release governance.

• Drive automation across provisioning, configuration, patching, and operational tasks

(PowerShell, Bash, Python).

Security and networking

• Embed security by design: Entra ID architecture, RBAC and PIM, managed identities,

Key Vault, network segmentation, private endpoints, firewalls (Azure Firewall, NSGs,

WAF), and encryption standards.

• Implement governance and compliance controls using Azure Policy, Defender for Cloud,

and Microsoft security baselines; align designs with customer regulatory requirements.

• Design enterprise networking solutions: hybrid connectivity, DNS architecture, traffic

management (Front Door, Application Gateway, Load Balancer), and zero-trust network

patterns.

Monitoring and operational excellence

Design monitoring and observability solutions using Azure Monitor, Log Analytics, Application Insights, and alerting/action frameworks; integrate with customer ITSM and third-party tooling (e.g., Grafana, Prometheus, Dynatrace, Datadog)

• Define operational readiness: runbooks, SLIs/SLOs, backup and disaster recovery design (Azure Backup, Site Recovery), capacity planning, and cost optimization (Azure Cost Management, FinOps practices).

• Lead structured handover to managed services or customer operations teams

Requirements

Required Qualifications

• 8–10+ years of overall experience in IT infrastructure, cloud, and solution delivery, including experience with platforms beyond Azure (on-premises datacenter, VMware, AWS, or GCP).

• Minimum 4–5 years of hands-on Azure experience designing and delivering enterprise scale solutions in production.

• Proven track record delivering complex Azure projects for enterprise customers end to end — from design through implementation and handover — ideally in a consulting, system integrator, or professional services environment.

• Deep expertise across Azure IaaS and PaaS: compute, storage, networking, App Service, AKS, databases, and integration services.

• Strong Infrastructure as Code background: expert-level Terraform and/or Bicep (ARM), including module design, state management, and IaC governance at scale.

• Solid DevOps experience: Azure DevOps or GitHub Actions pipelines, Git workflows, artifact management, and release management for infrastructure and applications.

• Strong Azure security and identity knowledge: Entra ID, RBAC, PIM, conditional access, Defender for Cloud, Key Vault, and network security controls.

• Enterprise networking expertise: hub-spoke/VWAN topologies, ExpressRoute, VPN, DNS, load balancing, firewalls, and private connectivity patterns.

• Hands-on experience designing and implementing monitoring, logging, and alerting solutions (Azure Monitor, Log Analytics, Application Insights, or equivalent third-party platforms).

• Scripting and automation proficiency: PowerShell and at least one of Bash or Python.

• Experience with migration projects: discovery and assessment, migration tooling, and cutover planning for workloads moving from on-premises or other clouds to Azure.

• Excellent stakeholder management, workshop facilitation, and documentation skills; able to communicate effectively from engineering teams to executive level.

Preferred Qualifications

• Microsoft certifications: AZ-305 (Azure Solutions Architect Expert) strongly preferred; AZ-104, AZ-400, AZ-500, or AZ-700 a plus.

• Experience implementing enterprise-scale landing zones (ALZ accelerator, Terraform/Bicep ALZ modules).

• Kubernetes and container platform depth: AKS design, GitOps (Flux/Argo CD), Helm, and service mesh concepts.

• Exposure to hybrid and multicloud architectures: Azure Arc, Azure Stack HCI, or cross cloud networking and identity.

• Familiarity with FinOps practices and cloud cost governance frameworks.

• Experience with compliance frameworks relevant to enterprise customers (ISO 27001, SOC 2, PCI DSS, GDPR, or regional regulations).

• Experience in regulated industries (financial services, government, healthcare, energy) or large multi-vendor programs.

• TOGAF or equivalent architecture framework certification.

Key Competencies

• Ownership of outcomes: drives delivery to completion, not just design on paper

• Balances architectural rigor with delivery pragmatism, cost, and timelines

• Strong customer orientation and trusted-advisor mindset

• Leadership of technical teams without direct authority; mentorship of engineers

• Structured problem-solving under pressure, including escalation and incident situations

What We Offer

• Attractive compensation and benefits

• High-visibility enterprise engagements and modern Azure delivery practices

• Microsoft certification support and continuous learning budget

• Additional perks [Kentrrick.ai] is an equal opportunity employer. We welcome applicants from all backgrounds and are committed to building a diverse and inc