Azure Solution Architect

Azure Platform Solution Architect

Highly skilled Azure Platform Solution Architect with a strong hands-on background, focused on enabling application teams to onboard solutions onto a secure, governed Azure platform. Acts as a trusted advisor, guiding teams in adopting approved patterns while balancing governance, scalability, and flexibility. Brings a developer-first mindset and speaks the same language as application teams, ensuring practical and usable architecture guidance. Experienced in Azure Landing Zones (CAF, Well-Architected Framework), embedding secure-by-default principles into reusable platform patterns and IaC templates. Drives developer experience by building self-service capabilities in Backstage, enabling teams to onboard, provision landing zones, and manage RBAC and metadata independently. Contributes to subscription vending and automation, integrating APIs, IaC, and policy guardrails into a seamless experience. Operates with a code-first, product mindset, delivering reusable, version-controlled platform capabilities designed to reduce friction and maximize adoption. Works across platform, security, and application teams to continuously evolve the platform as a developer-centric product. Extensive background working in large-scale enterprise environments (multi-tentant and 300+ subscriptions), enabling standardized, automated, and policy-driven platforms that balance governance, agility, and developer self-service.

Responsibilities

Azure Platform Solution Architect responsibilities are embedded throughout the role description above and include enabling application teams to onboard solutions onto a secure, governed Azure platform, acting as a trusted advisor, guiding teams in adopting approved patterns, driving developer experience with self-service capabilities, contributing to subscription vending and automation, and evolving the platform as a developer-centric product in large-scale enterprise environments.

Qualifications

• Experience: 10+ Years
• Relevant certifications: AZ-305, AZ-204, AZ-400, GH-200, GH-300

Required Skills

• Azure Platform Expertise (Deep knowledge of Azure Landing Zones, management groups, subscriptions, subscription vending solution, strong networking skills, identity (Entra ID), RBAC, PIM, policy baselines with Azure Policy (with EPAC) in enterprise-scale environments)
• Solution Architecture (Strong ability to design scalable, secure, and governed cloud architectures aligned with CAF and Well-Architected Framework)
• Governance & Security (Strong understanding of secure-by-default principles, policy-as-code, compliance, and enterprise guardrails)
• API & Integration (Experience designing, consuming, and integrating REST APIs to enable automation, self-service workflows, and platform interoperability)
• Platform Engineering (Ability to design and deliver platform capabilities as reusable products with automation, CI/CD, and strong governance integration)
• Developer portal / Software development (Experience building and integrating self-service capabilities, templates, and workflows in Backstage (or similar platforms). Typescript, React, Expressjs, .NET)
• Application Authentication (OAuth2/OIDC flows, client credentials, certificate-based auth, Microsoft Graph API (API permissions (delegated vs application), workload identity federation)
• Infrastructure as Code & Automation (Bicep, AVM, PowerShell, Python)
• Cloud services (Functions, Logic Apps, Container Apps, App Services, AKS, Databases (SQL & Cosmos), API management, Key Vault, Log Analytics, Azure Monitor)
• CI/CD (Github, version control, workflows (YAML)
• AI-assisted development tools (Github Copilot, Claude Code)