Azure Cloud Infrastructure Architect

US

ID asp-006-1126

Full Time

06/11/2026

Work Mode: Hybrid

Employment Type: Contract

Role Overview:

We are seeking a highly experienced Azure Cloud Infrastructure Architect to lead the design, governance, security, and implementation of enterprise-scale Azure platforms. The role requires deep expertise in Azure networking, hub-and-spoke architectures, landing zones, hybrid connectivity, security controls, DNS, routing, and infrastructure automation.

The architect will define cloud standards, provide technical leadership, and drive large-scale cloud transformation initiatives.

Roles & Responsibilities:

• Azure Platform & Landing Zone Architecture Design and implement enterprise Azure Landing Zones, management groups, subscriptions, and governance frameworks.
• Define Azure architectural standards, naming conventions, tagging strategies, RBAC models, and policy guardrails.
• Establish multi-environment and multi-subscription architectures for large-scale enterprise deployments.
• Networking & Connectivity Architecture Design Azure Hub-and Spoke network topologies with centralized connectivity and security services.
• Architect Virtual Networks (VNets), subnet segmentation, VNet Peering, UDRs, NSGs, ASGs, and routing policies.
• Design hybrid connectivity using ExpressRoute, Site-to-Site VPN, and BGP routing.
• Define DNS architecture using Azure Private DNS, conditional forwarding, split-brain DNS, and hybrid name resolution.
• Troubleshoot complex networking issues including routing loops, DNS failures, connectivity bottlenecks, and asymmetric routing.
• Security Architecture Implement Zero Trust security architecture across Azure environments.
• Design Azure Firewall, WAF, DDoS Protection, Private Endpoints, Bastion, and network segmentation strategies.
• Define Microsoft Entra ID integration, Conditional Access, PIM, RBAC, and identity governance controls.
• Implement Azure Policy, Defender for Cloud, Key Vault, and compliance enforcement frameworks.
• Infrastructure & Compute Architecture Architect Azure IaaS and PaaS solutions including: Virtual Machines VM Scale Sets AKS Application Gateway Load Balancers Azure Storage Azure SQL Design high-availability, disaster recovery, backup, and cross-region failover solutions.
• Automation & Platform Engineering Lead Infrastructure as Code initiatives using Terraform, Bicep, and ARM templates.
• Develop reusable infrastructure modules, CI/CD pipelines, and automated deployment frameworks.
• Drive DevSecops practices including security scanning, compliance validation, and policy-as-code implementation.
• Operations, Governance & FinOps Define monitoring and observability frameworks using Azure Monitor, Log Analytics, Application Insights, and Network Watcher.
• Establish cloud governance processes, architecture reviews, operational readiness reviews, and cloud standards.
• Drive FinOps initiatives including cost optimization, budgeting, resource utilization analysis, and chargeback model.

Required Skills:

• Azure Landing Zones (CAF)
• Hub-and-Spoke Network Design
• Azure Virtual WAN
• VNet Peering
• Network Security Groups (NSG) / Application Security Groups (ASG)
• Azure Firewall Premium
• UDR & BGP Routing
• ExpressRoute & Site-to-Site VPN
• Azure DNS & Private DNS Zones
• Azure Application Gateway & WAF
• Azure Front Door
• Microsoft Entra ID
• Azure Policy & Defender for Cloud
• AKS & Container Networking
• Terraform / Bicep
• Azure DevOps
• Disaster Recovery & Business Continuity
• Network Security & Zero Trust Architecture

Preferred Experience

• 10+ years in Infrastructure/Cloud Engineering.
• 5+ years designing enterprise Azure platforms.
• Experience with large-scale migrations, cloud networking, and platform governance.
• Azure Solutions Architect Expert certification preferred.
• Resume-Grade One-Liner Lead the architecture and governance of enterprise Azure platforms, specializing in Azure Landing Zones, Hub-and-Spoke networking, NSG/Firewall design, DNS and routing architecture, hybrid connectivity, security governance, infrastructure as Code, and highly available cloud infrastructure solutions

About Aspire Systems

Aspire Systems is a global technology services firm serving as a trusted technology partner for more than 275 customers across the globe. Founded in 1996, Aspire Systems helps leading enterprises engineer the future through its deep technology and domain expertise in Software & Technology, Banking, Insurance, Retail, and Public Sector.

AI-first IP, platforms, and domain expertise power Aspire System's advanced technology services

Aspire’s core philosophy of ‘Attention. Always.’ communicates its belief in lavishing care and attention to its employees, customers, and society. The company currently has over 4000 employees globally and is CMMI Level 3 certified.

It operates across North America, LATAM, Europe, Middle East, and Asia Pacific.

As an employer, Aspire Systems has been recognized 12 times in a row as one of the Top 100 ‘Best Companies to Work For’ by the Great Place to Work® Institute. To know more about Aspire Systems, visit https://www.aspiresys.com/

Who We Are

Aspire is built on deep expertise in Software Engineering, Digital Services, Testing, and Infrastructure & Application Support. We serve diverse industries including Independent Software Vendors, Retail, Banking & Financial Services, and Insurance.

Our proven frameworks and accelerators enable us to create future-ready, scalable, and business-focused systems, helping customers across the globe embrace digital transformation at speed and scale.

Why Join Aspire Systems

Being an Aspirian means being part of a future-ready, global workplace where you will work on emerging technologies, collaborate with diverse teams, and contribute to meaningful digital transformation initiatives.

We foster innovation, value diverse perspectives, and enable continuous learning and career growth — guided by our philosophy of “Attention. Always.” Aspire also follows a hybrid work model, promoting flexibility, collaboration, and work-life balance.

Learn more about Life at Aspire: https://www.aspiresys.com/careers/life-at-aspire

Our Commitment to Diversity & Inclusion

At Aspire Systems, we foster a work culture that appreciates diversity and inclusiveness. We understand that our multigenerational workforce represents different regions, cultures, economic backgrounds, races, genders, ethnicities, education levels, personalities, and religions. We believe these differences make us stronger and are committed to building an inclusive workplace where everyone feels respected and valued.

Privacy Notice

Aspire Systems values your privacy. Candidate information collected through this recruitment process will be used solely for hiring purposes, handled securely, and retained only as long as necessary in compliance with applicable privacy laws.

Disclaimer

The above statements are not intended to be a complete statement of job content, but rather to serve as a guide to the essential functions performed by the employee in this role. Management retains the discretion to add or change the duties of the position at any time.