Azure Cloud Architect

Responsibilities

The Azure Solutions Architect is primarily responsible for the stability, integrity, and governance of infrastructure-related cloud resources supporting Hines' core organizational functions. In addition to deploying and managing new resources, this individual will apply proven analytical and problem-solving skills to resolve issues and maximize the benefit of IT investments. The Azure Solutions Architect will also mentor and guide other IT staff, such as IT service desk personnel. All actions shall be executed with a cybersecurity-first mindset.

Resource Management

• Designing and implementing end-to-end solutions using Azure
• Developing, working with stake holders, & executing DR plans
• Ability to automate tasks and make changes with Terraform & Azure Resource Manager
• VDI administration, specifically Azure Virtual Desktop
• Azure SQL backup configuration and routine validation
• Support for internal and external audit requests; development of automation for recurring requests
• Resource tagging, inventory, and billing management
• Resource-specific networking & access management
• Provisioning of database resources and related replication/high availability configurations
• Primary Azure infrastructure services escalation resource for all IT teams
• Patching management for Windows Servers and AVD-hosted VMs
• Provide impact analysis for feature implementations and upgrades
• Perform routine internal audits of the Azure environment
• Maintaining Azure resource configuration and deployment standards
• Troubleshoot cloud resource performance and connectivity issues as required

Cybersecurity

• Implement and maintain Azure resource threat detection
• Understand the composition of our overarching security model and how components interact to provide a complete cyber protection suite for Hines
• Designing cloud solutions that expose minimal attack surface area
• Recommend and implement policies that best protect Hines without disrupting workflow for Hines or their partners
• Proactively monitor, investigate, and respond to cybersecurity events, including intrusion detection, inappropriate file access, logins from inappropriate or multiple locations
• Provide mitigation support when Hines systems are inappropriately used by either external attackers or internal misuse
• Aid in forensic investigations as requested by the Cybersecurity Team

Qualifications

Minimum Requirement include:

• A bachelor's degree in MIS, computer science, or another related field is preferred from an accredited institution
• Ten or more years of contributor experience in closely related technology roles, with a minimum of 5 years supporting a production Microsoft Azure environment at a mid-market enterprise or larger.
• A minimum of (1) active L2 or higher (MCSA/Associate) Microsoft certification in a role-relevant competency
• All Microsoft certifications, including expired certifications, should be reported
• Candidates are encouraged to report all other role-relevant technical and non-technical certifications
• Ability to design, implement, and maintain complex solutions in Azure
• Serve as the technical lead and owner of technical deal strategy
• Collaborate with multiple teams to identify and uncover customer business goals, needs, and pains
• Base competency with Azure CLI and PowerShell
• Experience with Azure storage accounts, networking, logging, monitoring, and automation
• Base competency with Git for script management
• Comprehensive understanding of Microsoft Active Directory and Entra
• Ability to manage multiple subscriptions that are managed by multiple teams
• Base competency leveraging Managed Identities to secure resources in Azure
• Strong knowledge and technical expertise in cloud-centric enterprise architecture, specifically Azure, with proven experience integrating new cloud operations with traditional infrastructure and application support operations
• Strong understanding of information technology and IT services, including cybersecurity practices and techniques to ensure the confidentiality and integrity of systems, data, and resources
• Demonstrated experience in designing and upgrading complex, technologically blended environments that mix legacy and newer cloud-based technologies
• Experience with P2V/V2V migration in Azure
• Understanding of SOC-related requests and reporting
• Excellent written and verbal communication skills with a particular focus on technical diagramming and documentation
• Strong working knowledge of network/routing/subnetting
• Working knowledge of the Azure catalog of services
• Knowledge of containerization technologies a plus
• Ability to create Visio's and diagrams of infrastructure and detailed data flow
• Work without much oversight and can complete tasks independently