Hybrid Azure Infrastructure Architect

at Codec Ireland

• Job title: Azure Infrastructure Architect
• Job type: Full Time
• Experience level: Senior, Lead
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Cloud, Terraform, Vault
• Location requirements: Hybrid, Dublin, Ireland

About the role

• Senior Azure Infrastructure Architect designing and implementing Azure infrastructure solutions for diverse clients. Leading projects and technical workshops while ensuring high delivery quality in a hybrid work environment.

Responsibilities

• Design and architect comprehensive Azure infrastructure solutions aligned to the Well-Architected Framework, Cloud Adoption Framework, and Azure Landing Zone best practices for enterprise customers
• Implement and deploy the solutions you architect, working hands-on with Azure services to ensure designs translate effectively into production environments
• Produce detailed solution pricing, scope documents, and cost estimates for customer proposals, working closely with pre-sales teams to position technical solutions commercially
• Lead technical discovery sessions, workshops, and architecture review boards with senior stakeholders at customer organisations
• Develop and maintain Infrastructure as Code using Terraform, Bicep, and PowerShell, including CI/CD pipeline implementation, automated testing frameworks, and secure secret management practices
• Design and implement identity and access management solutions using Microsoft Entra ID, including identity governance, conditional access policies, Privileged Identity Management, SSO, and B2B/B2C scenarios
• Deploy and configure the Microsoft Defender suite across customer environments, including Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel
• Architect and implement core Azure networking solutions including virtual networks, ExpressRoute and VPN connectivity, Azure Firewall, network security groups, load balancers, and hybrid connectivity patterns
• Delegate tasks effectively to junior and mid-level engineers, providing technical mentorship and ensuring delivery quality across the team
• Manage multiple concurrent customer projects, ensuring solutions are delivered to scope, timeline, and budget whilst maintaining high technical standards
• Produce customer-facing technical documentation, including high-level designs (HLD), low-level designs (LLD), architecture diagrams, and runbooks
• Stay current with Azure platform developments, new services, and evolving best practices, sharing knowledge with the wider technical team
• Collaborate with account managers and business development teams to identify expansion opportunities within existing customer accounts
• Conduct proof-of-concept work to validate architectural approaches and demonstrate value to prospective customers
• Cost up solutions using the Azure pricing calculator with options for PAYG, Reserved Instances and Savings Plan

Requirements

• Minimum 5 years' hands-on experience designing and implementing Azure infrastructure solutions in enterprise environments
• At least 8 years' overall experience in IT infrastructure engineering, architecture, or consultancy roles
• Strong Infrastructure as Code skills with Terraform, Bicep, and PowerShell, including experience with testing frameworks (Terratest, Pester), CI/CD integration, and secret management using Azure Key Vault or HashiCorp Vault
• Deep technical knowledge of Azure core networking and compute services: virtual networks, ExpressRoute, site-to-site VPN, Azure Firewall, network security groups, Azure Load Balancer, Application Gateway, virtual machines, storage accounts, virtual machine scale sets, and Azure Virtual Desktop
• Strong expertise in Microsoft Entra ID including identity governance, conditional access policies, Privileged Identity Management (PIM), single sign-on (SSO), multi-factor authentication, and B2B/B2C identity scenarios
• Strong knowledge of the Microsoft Defender suite: Defender for Cloud (formerly Security Center), Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel for security information and event management
• Proven ability to architect end-to-end solutions and produce accurate customer-facing pricing estimates, proposals, and statements of work
• Demonstrated experience applying Well-Architected Framework principles, Cloud Adoption Framework methodologies, and Azure Landing Zone reference architectures
• Excellent communication and presentation skills with the ability to engage confidently with senior technical and business stakeholders
• Experience managing multiple concurrent projects, prioritising effectively, and delegating work to engineering teams
• Previous experience working within a Microsoft Partner, systems integrator, or technology consultancy environment