Lead Platform Architect – Azure Platform

About the role

As Lead Platform Architect you will own the end‑to‑end Azure platform for Zurich’s Customer Analytics (ZCAM) team, driving design, implementation, operations and continuous improvement. You will work in an international, English‑speaking environment, collaborating with product, engineering, DevOps and data teams to deliver a robust, performant and easy‑to‑consume cloud foundation.

Key responsibilities

• Design, configure and operate Azure services across compute, storage, networking, identity and security.
• Define and maintain platform standards, reference architectures and governance policies.
• Review solution designs to ensure alignment with security, compliance and architectural principles.
• Implement Azure networking components such as VNets, subnets, DNS, VPN/ExpressRoute, firewalls and load balancers.
• Set up Azure Landing Zones, management groups, policies, tagging and subscription strategies.
• Establish baseline Azure Databricks workspaces with proper networking, storage and access controls.
• Automate deployments and operational tasks using Terraform, Bicep, PowerShell or Bash.
• Implement backup, disaster recovery and high‑availability patterns using native Azure services.
• Build monitoring, logging and alerting with Azure Monitor, Log Analytics and Application Insights.
• Mentor engineers and promote knowledge sharing across teams.

Required profile

• Strong hands‑on expertise in Microsoft Azure infrastructure, networking, identity, governance and security.
• Proven experience designing and operating enterprise‑scale Azure platforms.
• Deep knowledge of Azure networking (VNets, NSGs, routing, VPN, ExpressRoute, DNS, segmentation).
• Practical experience with Azure Databricks deployment and administration.
• Solid understanding of cloud architecture principles such as high availability, resilience and fault tolerance.
• Experience with Linux workloads (and preferably Windows) in Azure.

Required skills

• Microsoft Azure
• Azure networking (VNets, NSGs, VPN, ExpressRoute, DNS)
• Azure Databricks
• Terraform
• Bicep
• PowerShell
• Bash / Azure CLI
• Azure Policy, Management Groups, RBAC, tagging
• Azure Monitor, Log Analytics, Application Insights
• Defender for Cloud, Key Vault