Lead Platform Architect – Azure

About the role

You will own the end‑to‑end Azure platform, shaping its design, standards, implementation and continuous improvement. Working closely with product, engineering, DevOps and data teams, you will ensure the platform is secure, governed, performant and easy to consume in a global, English‑speaking environment.

Key responsibilities

• Design, configure and operate Azure services across compute, storage, networking, identity and security.
• Define and maintain platform standards, reference architectures and best‑practice guidelines.
• Review solution and infrastructure designs for alignment with security, governance and architectural principles.
• Implement and manage Azure networking components such as VNets, subnets, DNS, VPN/ExpressRoute, firewalls and load balancers.
• Support Azure Landing Zone setup, management groups, policies, subscription strategy and tagging.
• Establish baseline Azure Databricks environments, handling workspace deployment, networking, storage and access control.
• Automate deployments and operational tasks using Infrastructure as Code (Terraform, Bicep, PowerShell, Bash).
• Implement backup, disaster‑recovery and high‑availability patterns with native Azure services.
• Build and maintain monitoring, logging and alerting (Azure Monitor, Log Analytics, Application Insights).
• Apply cloud security best practices, including Defender for Cloud, Key Vault and policy‑driven controls.
• Monitor performance and cost, providing FinOps recommendations.
• Document environments, standards, architectural decisions and runbooks.
• Mentor engineers and promote knowledge sharing across teams.

Required profile

• Strong hands‑on expertise with Microsoft Azure at enterprise scale.
• Proven experience designing, operating and governing large‑scale cloud platforms.
• Deep knowledge of Azure networking, identity, security and governance.
• Practical experience with Azure Databricks deployment and administration.
• Ability to work in English daily and collaborate with globally distributed stakeholders.

Required skills

• Microsoft Azure (compute, storage, networking, identity, security)
• Azure networking (VNets, NSGs, routing, VPN, ExpressRoute, DNS)
• Azure Databricks
• Microsoft Entra ID, RBAC, Privileged Identity Management
• Infrastructure as Code: Terraform, Bicep, PowerShell, Bash
• Azure Monitor, Log Analytics, Application Insights
• Defender for Cloud, Azure Key Vault, Azure Policy
• Backup, disaster‑recovery and high‑availability services