Azure Infra Architect - Hybrid Cloud & Security

Stallion Infrastructure Services, Ltd.; Houston (TX); Vor Ort; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

The Infrastructure Architect at Stallion Infrastructure Services, Ltd. is responsible for the design, implementation, and operation of hybrid IT infrastructure centered on Microsoft Azure.

Focused on cloud architecture across production, development, and DR, this role ensures secure, scalable, and cost-effective solutions and collaborates with internal teams and vendors. This in-office position is located in Houston, Texas.

Qualifikationen

• Deep hands-on experience designing and operating Microsoft Azure infrastructure, including networking, compute, storage, and identity (Entra ID, RBAC).
• Working knowledge of Azure platform services, cost management, monitoring, and governance.
• Solid understanding of firewall and network security concepts, including stateful inspection, policy design, NAT, high availability, and IPsec/SSL VPN.
• A thorough understanding of networking protocols and concepts (e.g., TCP/IP, OSI model, DNS, DHCP, BGP, VLANs, 802.1X).
• Ability to independently root-cause complex, multi-layered issues spanning cloud, network, operating system, and application layers.
• Thorough knowledge of Windows Server and Active Directory in a multi-domain-controller environment; Linux administration experience.
• Strong PowerShell scripting skills; comfortable with command-line tools and APIs.
• Experience with backup, replication, and disaster recovery platforms and with designing for high availability.
• Experience with virtualization and migrating workloads from on-premises environments to the cloud.
• Track record of owning infrastructure projects end-to-end and leading the replacement of legacy platforms.
• Ability to manage and escalation to external vendors (cloud, licensing, circuit, and security providers) and coordinate vendor technicians at Stallion locations.
• Ability to collaborate with internal teams to diagnose problems and present resolutions.
• Ability to create change management and follow procedures to ensure high availability.
• Ability to work independently and to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
• Ability to work in a team environment.

Aufgaben

• Designs, builds, and maintains Microsoft Azure infrastructure, including virtual networking (VNets, NSGs, route tables, load balancers, VPN gateways), compute, storage, and platform services.
• Owns cloud architecture across multiple Azure regions and environments (production, development, disaster recovery), applying consistent design standards across each.
• Designs and deploys Azure managed services (e.g., managed databases, caching, file and object storage), including high availability and disaster recovery decisions.
• Provides the infrastructure foundation for business-critical integration and AI platforms, including private endpoints, DNS, and access controls.
• Manages Azure cost optimization, including reservations, right-sizing, and capacity planning.
• Administers Microsoft Entra ID and Azure role-based access control, including custom roles, application registrations, SSO integrations, and MFA.
• Maintains on-premises Active Directory, DNS, and DHCP in a multi-domain-controller environment, including replication health and role placement.
• Designs and administers firewall and network security infrastructure across corporate, datacenter, and field locations, including firewall policy, high availability, remote-access and site-to-site VPN, SD-WAN, and routing.
• Architects and maintains disaster recovery capabilities, including cross-region replication, failover design, and periodic DR testing.
• Ensures backup coverage across server and cloud workloads, and oversees endpoint security, vulnerability management, and SIEM integration.
• Leads migration and modernization initiatives, including on-premises-to-cloud migrations, legacy platform retirement, and evaluation and replacement of aging tools.
• Supports new site openings, site closures, and acquisitions, including network buildouts, circuit provisioning, telephony (UCaaS), and integration into company standards.
• Maintains a recurring security and operations cadence: scheduled patching, CVE-driven emergency remediation, firmware upgrades, credential rotation, certificate and license renewals, and device compliance.
• Manages infrastructure vendors and contracts, including licensing renewals, ISP/circuit providers, and third-party security assessments and remediation.
• Creates and maintains documentation of environment architecture, network configuration, standard procedures, and security findings.
• Develops scripts and automation (e.g., PowerShell, Azure CLI, REST APIs) to reduce recurring manual work.
• Plans and tracks infrastructure work through a formal project management process (e.g., sprint planning, backlog management).
• Provides Level 3-tier support in troubleshooting to resolve issues.
• Participates in proof of concepts to assist in defining technology direction and enabling business strategy.
• Selects and implements security tools, policies, and procedures to help enforce system standards.
• After hours, weekend work occasionally required during off-hours maintenance windows.
• Performs other related duties as assigned

Kenntnisse

Azure

Networking

PowerShell

Linux

Windows Server/AD

RBAC/Entra ID

Cost optimization

Ausbildung

Bachelor's degree in Computer Science or related

Tools

Fortinet FortiGate

FortiManager

Fortinet NSE

Veeam

Zerto

Commvault

Azure CLI

Azure DevOps

Jobbeschreibung

The Infrastructure Architect at Stallion Infrastructure Services, Ltd. is responsible for the design, implementation, and operation of hybrid IT infrastructure centered on Microsoft Azure.

Focused on cloud architecture across production, development, and DR, this role ensures secure, scalable, and cost-effective solutions and collaborates with internal teams and vendors. This in-office position is located in Houston, Texas.