Key Responsibilities:
- Design and deploy the Azure Landing Zone using Cloud Adoption Framework (CAF) principles.
- Define workload-level migration strategies including Rehost, Replatform, and Refactor based on assessment data.
- Architect the hub-and-spoke network topology and ExpressRoute connectivity to the customer datacenter.
- Produce Azure architecture reference designs, decision records, and Architecture Review Board documentation.
- Validate Azure Migrate right-sizing recommendations and optimize Azure SKU selection.
- Provide architectural oversight and sign-off on wave migration plans.
- Advise on Azure governance, policy, and security baseline configuration.
- Collaborate with the Security Engineer to ensure all designs meet GDPR and BSI requirements.
Required Skills:
- 10+ years of experience in enterprise IT architecture.
- At least 4 years focused on Azure cloud architecture.
- Deep hands-on expertise with Azure IaaS and PaaS services.
- Experience with:
- Azure VMs
- AKS
- App Service
- Azure SQL
- Azure Networking
- Proven experience designing Azure Landing Zones using CAF / ALZ framework.
- Experience with VMware to Azure migration using Azure Migrate.
- Solid knowledge of Azure networking, including:
- vWAN
- ExpressRoute
- Azure Firewall
- NSGs
- Private Endpoints