Infrastructure Architect - Contract Stockton-on-Tees ·

Ekco Group; Tees Valley; Remote; GBP 90,000 - 120,000; Full time

Job summary

Ekco seeks an experienced Technical Architect to lead end-to-end architecture for a major enterprise device migration and workplace transformation programme within a GMP-regulated environment. The role oversees infrastructure, identity, networking, and security across multiple workstreams, ensuring scalable, secure solutions aligned to enterprise standards.

The candidate will provide governance, design validation, and stakeholder engagement, guiding migration, deployment, and transition to

Qualifications

• Proven experience in enterprise architecture across large-scale IT environments and transformation programmes.
• Strong background in infrastructure, Active Directory/identity, networking, and security architecture.
• Experience delivering architecture within large-scale migration, modernisation, or enterprise transformation initiatives.
• Deep understanding of ITIL-based governance and service delivery models.

Responsibilities

• Define and maintain technical architecture across infrastructure, EUC, identity, network, and security domains.
• Provide architectural governance and design assurance across migration and transformation workstreams.
• Support design and integration of enterprise services during large-scale device migration activities.
• Ensure alignment of solutions with enterprise standards, security policies, and roadmaps.
• Review designs across infrastructure, identity, networking, and security.

Skills

Enterprise architecture

Active Directory/identity

Networking

Security architecture

VDI/Citrix environments

Job description

About Ekco

Founded in 2016, Ekco has quickly become one of Europe's fastest-growing cloud solution providers and your trusted security-first Managed Service Provider.
IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk - powered by local expertise, delivered at European scale.

We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments.

In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world.

Today, we're a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia - we're continuing to grow.

At Ekco, how we work matters as much as what we deliver. Our people live by four core values that shape everything we do:

• On It: We take ownership, follow through, and get things done.

• All In : We collaborate, support each other, and commit fully to shared goals.

• Connected: We build trusted relationships with colleagues, clients, and partners.

• Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.

If these values resonate with you, you'll feel right at home here.

The Role

We are seeking an experienced Technical Architect to support a large-scale enterprise device migration and workplace transformation programme, within a highly regulated pharmaceutical GMP environment. The role will define, guide, and assure the end-to-end architecture across infrastructure, identity, networking, and security domains within a complex enterprise environment. The successful candidate will ensure that all technical solutions are scalable, secure, and aligned to enterprise standards, providing architectural governance and leadership across multiple technical workstreams during migration, deployment, and transition to operational support.

Requirements:

• Define and maintain technical architecture across infrastructure, EUC, identity, network, and security domains

• Provide architectural governance and design assurance across all migration and transformation workstreams

• Support the design and integration of enterprise services during large-scale device migration activities

• Ensure alignment of solutions with enterprise standards, security policies, and strategic roadmaps

• Review technical designs across infrastructure, EUC, Active Directory, networking, and security

• Work closely with infrastructure, EUC, security, networking, and application teams to ensure end-to-end solution alignment

• Support the definition of target-state architecture and transitional states during migration programmes

• Identify risks, dependencies, and design gaps across technical solutions and provide mitigation strategies

• Ensure identity and access management models are scalable and secure across enterprise systems

• Oversee network and security architecture, including segmentation and firewall strategy utilising Purdue Enterprise Reference Architecture

• Provide architectural input into major incidents, problem investigations, and root cause analysis where required

• Interviews with buiness stakeholders to understand requirements and drivers

• Support vendor and third-party solution assessments and design validation

• Contribute to enterprise roadmaps, standards, and reference architectures

Requirements:

• Proven experience in enterprise architecture across large-scale IT environments and transformation programmes

• Strong background in infrastructure, Active Directory/identity, networking, and security architecture

• Experience delivering architecture within large-scale migration, modernisation, or enterprise transformation initiatives

• Deep understanding of enterprise IT operations, service delivery models, and ITIL-based governance frameworks

• Experience working in regulated or highly controlled enterprise environments

• Strong stakeholder management and communication skills across technical and executive levels

• Ability to operate effectively in complex, fast-paced project delivery environments

• Strong technical expertise in: o Enterprise infrastructure and identity architecture (Active Directory, Group Policy, Windows and Linux Server)

• Enterprise networking (LAN/WAN, VPN, wireless, Cisco technologies, segmentation, firewall architecture)

• Security architecture (including Palo Alto firewalls, Zero Trust principles, secure access models, endpoint/security alignment)

• Citrix or VDI environments

Why Ekco

• Company of the year 2026 Tech Excellence Awards

• Microsoft's 2023 Rising Star Security Partner of the Year

• First Irish Microsoft MSP to achieve all four Microsoft Security Specializations

• A culture rooted in diversity, equality, inclusion & belonging

• A commitment to internal mobility and career progression

• Flexible, family-friendly working at the heart of our culture

• Proud to be your trusted security-first Managed Service Provider chosen by IT leaders to drive operational efficiency, scale smarter and stay ahead of risk.