Azure Cloud Infrastructure Architect — Hybrid Landing Zones

Aspire Systems, Inc.; United States; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Aspire Systems is seeking a highly experienced Azure Cloud Infrastructure Architect to lead design, governance, security, and implementation of enterprise-scale Azure platforms. The role requires deep expertise in Azure networking, landing zones, hybrid connectivity, and infrastructure automation.

You will drive standards, oversee large-scale cloud transformations, and partner with security and operations teams to ensure resilience, cost awareness, and compliance across multi-subscription

Qualifications

• Experience designing large-scale Azure platforms with landing zones and hub-and-spoke networking.
• Proven ability to implement security controls, policy guardrails, and identity governance.
• Strong background in IaC using Terraform or Bicep and cloud automation.
• Azure Solutions Architect Expert certification preferred.

Responsibilities

• Lead Azure Landing Zone architecture, governance, and multi-subscription designs.
• Design and implement hub-and-spoke networking, ExpressRoute, and VPN connectivity.
• Define RBAC, policy guardrails, and security frameworks across environments.
• Develop high-availability, DR, and cross-region strategies.
• Build reusable infrastructure modules and CI/CD pipelines.
• Drive DevSecOps practices including policy-as-code and compliance checks.

Skills

Hub-and-Spoke Network Design

VNet Peering

Network Security Groups (NSG) / ASGs

UDR & BGP Routing

ExpressRoute & Site-to-Site VPN

Azure Policy & Defender for Cloud

AKS & Container Networking

Terraform / Bicep

Disaster Recovery & BC

Network Security & Zero Trust

Tools

Terraform

Bicep

Job description

Aspire Systems is seeking a highly experienced Azure Cloud Infrastructure Architect to lead design, governance, security, and implementation of enterprise-scale Azure platforms. The role requires deep expertise in Azure networking, landing zones, hybrid connectivity, and infrastructure automation.

You will drive standards, oversee large-scale cloud transformations, and partner with security and operations teams to ensure resilience, cost awareness, and compliance across multi-subscription