Azure Cloud Architect

ValueLabs; Malmö kommun; On-site; SEK 800,000 - 1,200,000; Full time

Job summary

A technology consulting firm is seeking a Senior Azure Cloud Architect in Malmö, Sweden, to design and build secure Azure environments. This role requires deep expertise in Azure Networking, Security, and Infrastructure as Code. Candidates should have strong communication skills and experience mentoring teams. You'll lead cloud transformation initiatives and ensure compliance with governance standards. The ideal candidate must have hands-on experience with Azure services, Terraform, and cloud security best practices. Join us to impact cloud architecture at scale.

Qualifications

• Strong hands‑on expertise with enterprise networking architectures.
• Expert proficiency in Terraform and/or Bicep.
• Deep knowledge of TCP/IP, DNS, routing, and cloud security best practices.

Responsibilities

• Design and implement enterprise‑grade Azure Landing Zones.
• Define and implement management groups hierarchy and subscription strategy.
• Architect secure and scalable Azure Networking solutions.

Skills

Enterprise networking architectures

Identity and access management

Azure security tooling and governance

Terraform and/or Bicep

Git‑based workflows

CI/CD pipelines for infrastructure

TCP/IP

DNS

routing

firewall concepts

Job description

We are seeking a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. The candidate will be responsible for designing, building, securing, and operating production‑grade Azure environments aligned with Microsoft Cloud Adoption Framework (CAF) and Well‑Architected Framework principles. The role requires hands‑on mastery of Infrastructure as Code (Terraform and/or Bicep), automation, governance, identity, security controls, and scalable network design. The individual will also serve as a technical advisor to stakeholders, lead cloud transformation initiatives, and mentor engineering teams. Strong communication, stakeholder management, documentation, and presentation skills are mandatory.

Roles and Responsibilities

• Design and implement enterprise‑grade Azure Landing Zones aligned with:
  • Microsoft Cloud Adoption Framework (CAF)
  • Azure Enterprise‑Scale Architecture
  • Zero Trust Security Model
• Define and implement:
  • Management Groups hierarchy
  • Subscription strategy and lifecycle management
  • Resource organization standards
  • Naming conventions and tagging strategy
  • RBAC and identity governance
  • Policy‑driven governance and compliance
• Azure Networking Architect secure and scalable network topologies:
  • Hub‑and‑Spoke / Virtual WAN architectures
  • ExpressRoute and Site‑to‑Site VPN connectivity
  • Private Endpoints and Private DNS Zones
  • Azure Firewall, NSGs, ASGs, Route Tables
  • Load Balancers, Application Gateway, Front Door
• Design IP addressing strategy and network segmentation.
• Implement network security controls and traffic inspection models.
• Optimize network performance, availability, and resiliency.

Azure Security & Governance

• Implement enterprise security posture using:
  • Microsoft Defender for Cloud
  • Azure Policy and Initiative assignments
  • Azure Blueprints (where applicable)
  • Conditional Access and Identity Protection
  • Privileged Identity Management (PIM)
• Design secure identity architecture using:
  • Entra ID (Azure AD)
  • RBAC models and least‑privilege access
  • Managed Identities
• Ensure compliance with regulatory standards (ISO, SOC2, CIS, NIST – as applicable).
• Establish logging, monitoring, SIEM integration, and audit controls.

Infrastructure as Code & Automation

• Terraform (preferred) and/or Bicep
  • Create standardized deployment pipelines using:
    • Azure DevOps / GitHub Actions
  • Implement CI/CD practices for infrastructure delivery.
  • Enforce version control, peer reviews, testing, and promotion pipelines.
  • Automate provisioning, governance, security baselines, and guardrails.

Operations, Reliability & Cost Management

• High availability and disaster recovery
• Backup and recovery
• Scalability and performance optimization
• Implement observability using:
  • Azure Monitor, Log Analytics, Application Insights
• Budgeting and chargeback/showback models
• Rightsizing and optimization

Stakeholder Engagement & Leadership

• Translate business requirements into technical architecture.
• Produce high‑quality architecture documentation, diagrams, and runbooks.
• Lead technical discussions with customers, auditors, security teams, and delivery teams.
• Mentor junior engineers and promote engineering excellence.
• Participate in design reviews, audits, and governance forums.

Required Skills & Qualifications Technical Skills

• Strong hands‑on expertise with:
  • Enterprise networking architectures
  • Identity and access management
  • Azure security tooling and governance
• Expert‑level proficiency in:
  • Terraform and/or Bicep
  • Git‑based workflows
  • CI/CD pipelines for infrastructure
• Deep knowledge of:
  • TCP/IP, DNS, routing, firewall concepts
  • Hybrid connectivity models
  • Cloud security best practices
• Experience working in multi‑subscription, enterprise environments.