Azure Cloud Architect - Infrastructure & Automation Leader

Arch Capital Group Ltd.; Farmington (CT); On-site; USD 125,000 - 155,000; Full time

Benefits offered by this job

Medical plans

Dental and vision

Prescription drug coverage

401k with matching

Paid time off

Paid holidays

Volunteer Time Off

Life and AD&D insurance

Disability (Short/Long-Term)

Paid Parental Leave

Student Loan Assistance

Tuition Reimbursement

Backup Child/Elder Care

Job summary

Arch Capital Group Ltd. is seeking a mid-level Infrastructure Cloud Engineer to design, operate, and evolve our Azure environment. You will translate business needs into Azure architectures and drive automation of operations for infrastructure and cost control.

You will design networks, IAM, hybrid connectivity, and governance while collaborating with security and enterprise architecture teams to ensure compliant, scalable solutions.

Qualifications

• 3–5 years in infrastructure, systems administration, or cloud engineering.
• At least 3 years hands-on experience with Azure native services (compute, storage, networking, Entra ID) AZ-104 or AZ-305 required.
• Solid networking fundamentals (TCP/IP, DNS, VPN, load balancing, hybrid connectivity).
• Demonstrated 2 years’ experience writing and troubleshooting Infrastructure as Code (IaC) (Terraform or Bicep).
• Github in use for infrastructure scripting and IaC.
• Scripting proficiency (PowerShell or Python) for diagnostics and reporting.
• Experience with Windows/Linux server administration.

Responsibilities

• Design Azure infrastructure architecture for new projects (networking topology, resource organization, subscription/resource group structure).
• Evaluate Azure services against business requirements and recommend solutions.
• Produce and maintain architecture diagrams, design documents, and decision records for review with stakeholders.
• Assess proposed changes for scalability, resilience, and cost impact before build.
• Participate in architecture review sessions with Arch Re Enterprise Architecture team and Service Delivery management.
• Monitor resource health, utilization, and cost; flag optimization opportunities.
• Design and build dashboards, scripts, tools and other assets to be used by the Infrastructure Operations team.
• Develop thresholds, alerting and supporting processes for incident routing.
• Troubleshoot infrastructure issues and produce root-cause analysis and remediation specs for Corporate to execute as a member of the level 3 Infrastructure support team.
• Design and maintain in collaboration with Network Engineer specifications for VNets, subnets, peering, ExpressRoute/VPN, load balancers, and firewalls.
• Design and maintain DNS and hybrid connectivity between on-prem and Arch cloud environments in Azure and AWS.
• Design IAM/RBAC models and least-privilege access structures in Azure AD/Entra ID.
• Review conditional access policies set by Corporate for segment requirements and access review processes and how they impact users and services delivered by Reinsurance IT.
• Partner with security/compliance on identity governance given regulatory obligations (insurance/financial services).
• Ensure architecture designs meet compliance requirements (SOC 2, applicable insurance/financial regulations).
• Review security posture of existing cloud resources and recommend remediation.
• Assist product teams with DevSecOps processes and remediations of findings where applicable.
• Support audits with architecture documentation and evidence.
• Translate architecture designs into specifications and runbooks Corporate's build teams can execute (Terraform/ARM/Bicep requirements, pipeline requests).
• Review Corporate's IaC output against intended design for correctness.

Skills

Azure

Networking

IaC scripting

PowerShell

Python

Windows/Linux admin

GitHub usage

Education

AZ-104 / AZ-305 certification

Tools

Terraform

Bicep

ARM templates

GitHub

Azure AD/Entra ID

Job description

Arch Capital Group Ltd. is seeking a mid-level Infrastructure Cloud Engineer to design, operate, and evolve our Azure environment. You will translate business needs into Azure architectures and drive automation of operations for infrastructure and cost control.

You will design networks, IAM, hybrid connectivity, and governance while collaborating with security and enterprise architecture teams to ensure compliant, scalable solutions.