Cloud Architect

ITMC Systems, Inc; Brasil; Presencial; BRL 350 000 - 700 000; Tempo integral

Resumo da oferta

ITMC Systems, Inc. in Brazil seeks an experienced Azure Solutions Architect to design, build, and troubleshoot cloud solutions across a hybrid platform.

You will collaborate with Global Infrastructure, Security, Network, Enterprise, Application, and Data teams to ensure security, compliance, and alignment with global cloud strategy. Day-to-day responsibilities include leading IaaS-to-PaaS modernization, serving as L3 escalation, designing secure-by-default architectures, threat modeling, and

Qualificações

• Azure architecture expertise and AZ-305 certification.
• 5+ years in an Azure architecture role spanning IaaS, PaaS, and integrations.
• 10+ years in cloud and IT infrastructure architecture.
• Hands-on experience modernizing applications from IaaS to PaaS on Azure.
• Experience with Azure AI services and securing them in the enterprise landing zone.
• Proven ability to troubleshoot complex infrastructure issues at L3.
• Strong cloud security: IAM, network security, encryption, key management, tenant isolation.
• Hands-on with Defender for Cloud, Sentinel, Key Vault, Azure Policy.
• Windows/Linux administration and Azure Portal experience.
• FinOps / cost optimization in Azure.
• Azure DevOps in Agile environments.

Responsabilidades

• Lead application modernization from IaaS to PaaS for scalability and cost efficiency.
• Act as L3 escalation for complex infra issues and RCA.
• Design secure-by-default architectures with zero-trust and IAM.
• Collaborate on threat modeling and design reviews to meet security standards.
• Assess impact of new solutions and integration with existing ecosystem.
• Design architectures focusing on user experience, scalability, standardization, cost, and security.
• Build cost-optimized designs with right-sizing and FinOps practices.
• Scope multiple projects and deliver on time.
• Identify gaps and drive cross-team knowledge sharing.
• Map dependencies and deliver solutions quickly with cross-functional teams.
• Produce technical docs and architecture diagrams.
• Advise on cloud platform use across the ecosystem.
• Deliver end-to-end cloud infra designs using PaaS.
• Coordinate with Enterprise/Data/Security/Network teams.
• Champion Global Cloud Competency Center standards.

Conhecimentos

Azure architecture

AZ-305

IaaS to PaaS

Azure AI

Cloud security

Entra ID / RBAC

Azure DevOps

Cost Management

Defender/Sentinel

Windows/Linux

Networking

Ferramentas

Azure DevOps

Azure Portal

Descrição da oferta de emprego

Must Have: (1) verified Active AZ-305 certification, and (2) named, owned design of IaaS-to-PaaS application modernizations (App Service, Azure SQL PaaS, containers).

Job Description:

You’ll architect, design, build, and troubleshoot cloud solutions across a hybrid cloud platform, partnering with our Global Infrastructure, Security, Network, Enterprise, Application, and Data teams to ensure everything we ship is secure, compliant, and aligned with standards and our global cloud strategy.

Day to day, you will:

• Lead application modernization — re-platform and refactor workloads from IaaS to PaaS to improve scalability, cost efficiency, and maintainability.
• Serve as Level 3 (L3) escalation for complex infrastructure issues, driving deep root‑cause analysis and resolving problems that lower support tiers can’t.
• Design secure‑by‑default architectures — embed zero‑trust principles, defense‑in‑depth, identity and access management, network segmentation, and data protection into every solution from the start.
• Partner with Security Architects on threat modeling and design reviews and ensure solutions meet security standards and relevant compliance requirements.
• Assess the technical impact of new solutions and how they integrate into the existing ecosystem, including impact assessments for new projects and technologies.
• Design technical architectures with a clear focus on user experience, scalability, standardization, cost, and security.
• Build cost‑optimized designs — right‑size resources, select the most cost‑effective service tiers and pricing models (reserved capacity, autoscaling, PaaS consumption), and apply FinOps practices so solutions stay efficient as they scale.
• Scope multiple concurrent projects accurately and deliver on time.
• Identify process and knowledge gaps and work across teams to close them.
• Map business and technology dependencies and collaborate with cross‑functional teams to deliver solutions quickly.
• Produce technical documentation and architecture diagrams.
• Recommend solutions grounded in Global Standards to keep consistency through this period of change.
• Advise on how and where Cloud Platforms can be used across the ecosystem and guide architectural choices in line with global standards.
• Deliver end‑to‑end cloud infrastructure architectures and designs using modern capabilities such as PaaS.
• Partner with architects across other disciplines (Enterprise, Data, Security, Network, Application) and engage the broader Cloud Competency Center community across regions.
• Manage partner relationships and coordinate development efforts across multiple teams.
• Champion the architectural standards set by the Global Cloud Competency Center and ensure alignment with global Enterprise Architecture principles.

Required Skills & Experience:

• Azure architecture expertise — proven ability to design and implement cloud infrastructure, platforms, and applications.
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or equivalent.
• 5+ years in an Azure architecture role spanning IaaS, PaaS, and integrations.
• 10+ years overall in cloud and IT infrastructure architecture.
• Hands‑on experience modernizing applications from IaaS to PaaS — re‑platforming and refactoring workloads onto managed Azure services.
• Experience with Azure AI services and assets — e.g., Azure OpenAI, Azure AI Foundry, Azure Machine Learning, Azure AI Search, and Cognitive Services — including how to architect, integrate, and secure them within the enterprise landing zone.
• Proven ability to troubleshoot complex infrastructure issues such as L3 escalation, including root‑cause analysis through resolution.
• Strong grasp of cloud security architecture: identity and access management (Microsoft Entra ID / RBAC), network security (segmentation, NSGs, private endpoints, firewalls), encryption at rest and in transit, key management, tenant isolation, vulnerability management, and SIEM.
• Hands‑on with Azure‑native security and governance tooling — Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, Azure Policy — and secure landing zone design.
• Hands‑on background administering Windows Server, Linux, and the Azure Portal.
• Cloud cost optimization / FinOps experience — cost modeling, right‑sizing, resource tagging and governance, and using Azure Cost Management to track, forecast, and reduce spend.
• Experience with Azure DevOps in a Scrum or Agile environment.
• Solid understanding across cloud and infrastructure components — servers, virtualization, storage, network, data, and applications — to deliver true end‑to‑end designs.
• Solid understanding of operating systems and networking. Experience in Window and Linux OS.