Azure Integration Architect

Job Description

Role : Azure Integration Architect

Duration of assignment: 6 months

Start date: 01/Apr/2024

Rate : £500

Number of persons required: 2

Location: Wokingham

Special working conditions (travel, on call etc.): 3 days a week in office

Key responsibilities:

• Work with partner SMEs, internal cloud and security and enterprise architects to develop an understanding of the heterogeneous cloud environment, current pain points, and areas of opportunities for the target Azure architecture
• Work with partner architects to devise the future vision, target architecture, operating model, and delivery approach to separate and migrate workloads as part of a divestiture
• Design the target Azure tenant, landing zone, and network architecture aligned to the Well Architected Framework (WAF) to incorporate Azure best-practice for use of services as well as shared and security services for foundation phase and then extended to end-state • Basic enterprise integration on Azure Use Azure services such as Azure Logic Apps and Azure API Management to orchestrate calls to enterprise back-end systems including Azure services, software as a service (SaaS) systems, Logic App, Function app, Event Grid, and web services
• Enterprise integration using message broker and events
• Integrate enterprise back-end systems using message broker and events to decouple services for greater scalability and reliability.
• Designing and implementing cloud security strategies and policies that meet an organization's specific needs.
• Ensuring the security of cloud-based data and applications against unauthorized access, theft, and other threats.
• Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them.
• Demonstrated capability to design, deploy, and operationalize secure and highly scalable enterprise systems on public clouds (Ideally Azure)
• Experience with secure software development, data protection, cryptography, key management, and access management (IAM), network security (VPNs) within cloud environments
• Develop the workload migration strategy and approach, based on application affinity analysis, from legacy cloud and on-premise environments to the target landscape, taking into consideration NG / ESO security policies and standards and governance requirements. The work will include consideration for migration of legacy, current and future planned workloads part of NGESO’s business plan
• Work with partner SMEs and internal architecture and security teams to devise the target cloud operating model and how it integrates with NGESO’s eco-system, with consideration for: o Alignment to Microsoft’s Cloud Adoption Framework o Integration with ITSM, Cyber Security Monitoring and Network services o Adoption of Technology Business Management (TBM) framework as part of the target operating model design
• Target governance model for cloud services

Your Profile

Key skills/knowledge/experience: (Up to 10, Avoid repetition)

• Azure Cloud certification (e.g. AZ303, AZ304, AZ305)
• Experience in Azure landing zone design including tenant and subscription planning, platform automation design, devsecops tooling, network topology & connectivity, access management & privileged design, platform monitoring, security architecture, high availability architecture design.
• Experience in one or more programming : .Net / C#, Java, Python, Ruby, or PHP
• Understanding of Cloud Platform Services (IaaS, SaaS, and PaaS)
• Experience in DevOps methodology (preferably DevSecOps)
• Microservices, Containers - Docker, Kubernetes
• Good to have: (As applicable)
• Other cloud platforms like AWS
• Azure AD management
• Hosting traditional Virtual Machines in Azure, Hyper-V and VMware.
• Different technologies and solutions for Single Sign On, Multi Factor Authentication and AD Synchronization
• Web application development including using tools like Visual Studio
• Network technologies, especially in Azure