Azure Infrastructure Architect

Ampcus, Inc; New York (NY); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work option

Equal Opportunity Employer

Professional development support

Job summary

Ampcus Inc. is seeking an experienced Azure Infrastructure Architect to lead architecture, governance, and implementation of enterprise-scale Azure cloud platforms.

You will define Landing Zone standards, security baselines, networking, HA/DR, cost optimization, and operational readiness while guiding delivery teams. The role demands 12+ years of IT infrastructure and 5+ years of Azure platform design, with strong governance, stakeholder management, and leadership skills.

Qualifications

• 12+ years in IT infrastructure, cloud architecture, or enterprise technology experience.
• 5+ years designing enterprise Azure platforms and Landing Zones.
• Experience delivering AI, automation, cloud-native, and application modernization initiatives.
• Strong architecture governance, stakeholder management, and technical leadership skills.

Responsibilities

• Design end-to-end Azure reference architectures for digital tools, AI workloads, automation platforms, application hosting, and enterprise integrations.
• Define Azure Landing Zone architecture including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, naming standards, tagging, and governance.
• Lead architecture for compute, networking, storage, databases, AI services, AKS, App Services, Functions, Azure Virtual Desktop, and platform services.
• Define hybrid connectivity architecture including VNets, Subnets, NSGs, Private Endpoints, Private DNS, ExpressRoute, VPN, Azure Firewall, Application Gateway, Front Door.
• Define enterprise identity architecture using Microsoft Entra ID, Managed Identities, Service Principals, and Key Vault integration.
• Establish Infrastructure-as-Code standards using Terraform, Bicep, and ARM Templates.
• Perform infrastructure sizing, capacity planning, HA/DR design, backup strategy, resilience reviews, and production readiness assessments.
• Provide technical leadership to Azure, Network, Security, DevOps, Application, and Data Engineering teams.
• Review solution designs against Microsoft Cloud Adoption Framework, Azure Well-Architected Framework, and enterprise security standards.
• Drive FinOps practices including Azure Cost Management, budgets, tagging strategy, rightsizing, and governance.
• Produce architecture documents, HLDs, LLD reviews, decision records, deployment blueprints, and operational standards.
• Identify technical risks, architectural dependencies, and mitigation plans throughout implementation.

Skills

Azure Landing Zones

Azure CAF

Azure Governance

RBAC & Policy

Identity & Security

Platform Architecture

Cross-functional Leadership

Executive Communication

Tools

Terraform

Bicep

ARM Templates

Azure DevOps

Git

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team. Location: Remote

Enterprise Cloud Platform

Primary Focus

Enterprise Azure architecture, Landing Zone governance, platform standards, solution design, and technical leadership.

Role Overview

Seeking an experienced Azure Infrastructure Architect to lead the architecture, governance, and implementation of enterprise-scale Azure cloud platforms supporting digital tools, AI-enabled services, automation platforms, and modern applications. The role will define Azure architecture standards, Landing Zone alignment, governance guardrails, security baselines, networking, high availability, disaster recovery, cost optimization, and operational readiness while providing technical leadership across delivery teams.

Key Responsibilities

• Design end-to-end Azure reference architectures for digital tools, AI workloads, automation platforms, application hosting, and enterprise integrations.
• Define Azure Landing Zone architecture including Management Groups, Subscriptions, Resource Groups, Azure Policy, RBAC, naming standards, tagging, and governance.
• Lead architecture for compute, networking, storage, databases, AI services, AKS, App Services, Functions, Azure Virtual Desktop, and platform services.
• Define hybrid connectivity architecture including VNets, Subnets, NSGs, Private Endpoints, Private DNS, ExpressRoute, VPN, Azure Firewall, Application Gateway, and Front Door.
• Define enterprise identity architecture using Microsoft Entra ID, Managed Identities, Service Principals, and Key Vault integration.
• Establish Infrastructure-as-Code standards using Terraform, Bicep, and ARM Templates.
• Perform infrastructure sizing, capacity planning, HA/DR design, backup strategy, resilience reviews, and production readiness assessments.
• Provide technical leadership to Azure, Network, Security, DevOps, Application, and Data Engineering teams.
• Review solution designs against Microsoft Cloud Adoption Framework, Azure Well-Architected Framework, and enterprise security standards.
• Drive FinOps practices including Azure Cost Management, budgets, tagging strategy, rightsizing, and governance.
• Produce architecture documents, HLDs, LLD reviews, decision records, deployment blueprints, and operational standards.
• Identify technical risks, architectural dependencies, and mitigation plans throughout implementation.

Required Technical Skills

• Azure Landing Zones, Cloud Adoption Framework (CAF), and Azure Well-Architected Framework
• Management Groups, Azure Policy, RBAC, Resource Graph, Azure Governance, and Cost Management
• Azure VMs, App Services, Azure Functions, AKS, Azure Container Registry, Azure Virtual Desktop
• Azure SQL, PostgreSQL Flexible Server, Storage Accounts, ADLS Gen2, Azure AI Search, Redis Cache, Event Hubs, Data Factory
• Azure OpenAI, AI Foundry/AI Studio, Document Intelligence, and AI platform architecture
• VNets, NSGs, UDRs, Private Endpoints, Private DNS, Azure Firewall, Application Gateway, Front Door, ExpressRoute, and VPN
• Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, Azure Backup
• Terraform, Bicep, ARM Templates, Azure DevOps, and Git-based deployment practices

Qualifications & Experience

• 12 years of IT infrastructure, cloud architecture, or enterprise technology experience.
• 5 years designing enterprise Azure platforms and Landing Zones.
• Experience delivering AI, automation, cloud-native, and application modernization initiatives.
• Strong architecture governance, stakeholder management, and technical leadership skills.

Preferred Certifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Azure DevOps Engineer Expert (AZ-400) - Preferred
• TOGAF certification or equivalent enterprise architecture experience - Preferred

Professional Competencies

• Executive communication and stakeholder management
• Architecture governance and decision making
• Structured problem solving
• Cross-functional leadership
• Technical mentoring and knowledge transfer

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.