Azure IaaS Cloud Architect

Role Summary

We are seeking a Senior Azure IaaS Cloud Architect with Azure Networking as the primary skill, complemented by deep SAP on Azure IaaS experience and strong FinOps discipline.

This role owns the network‑first, cost‑aware infrastructure architecture for SAP workloads on Azure, ensuring secure, high‑performance, highly available, and financially optimised Azure environments. The architect will design enterprise Azure networking, lead SAP migrations to Azure IaaS, and apply FinOps principles to control and optimise infrastructure spend across SAP landscapes.

Primary Skill Area: Azure Networking (Critical & Mandatory)

The successful candidate must be a strong Azure Network Architect first, with SAP, IaaS, and FinOps capabilities built on top of this foundation.

• Architect and own enterprise Azure networking designs, including:
  • Virtual WAN (where applicable)
  • VNet and subnet design per SAP tier
  • Latency, throughput, MTU, and routing considerations
• Lead hybrid connectivity architecture, including:
  • ExpressRoute (mandatory, primary connectivity)
• Design and govern:
  • Network Security Groups (NSGs)
  • User Defined Routes (UDRs)
  • Azure Firewall and/or NVAs
• Architect secure ingress and egress using:
  • Application Gateway (WAF)
• Define DNS, routing, and traffic‑flow strategies for SAP users, integrations, and management services
• Ensure networking aligns with Zero Trust, enterprise security, and SAP certification requirements
• Design and govern:
  • Managed disks (Premium / Ultra)
  • Availability Sets and Availability Zones
• Own infrastructure sizing, capacity planning, and performance tuning for SAP HANA
• Design HA/DR‑ready infrastructure meeting strict RTO/RPO targets
• Lead SAP ECC and SAP S/4HANA migrations to Azure IaaS
  • ASCS/ERS high availability
  • HANA scale‑up and scale‑out
  • Work closely with SAP Basis teams to ensure SAP supportability
• Design and implement Azure Landing Zones with a network‑first and cost‑aware approach
  • Define:
    • Management group and subscription hierarchy
    • Shared services and connectivity hubs
    • Network isolation per SAP tier
    • Controlled ingress/egress
    • Hybrid integration with on‑prem SAP landscapes
• Act as the design authority for Azure network, platform, and cost governance standards
• Embed FinOps principles into Azure IaaS and SAP architecture decisions
• Design cost‑optimised Azure network and infrastructure architectures, including:
  • Right‑sizing SAP VMs and HANA instances
  • Storage tier selection and performance‑cost trade‑offs
  • Network cost optimisation (ExpressRoute, egress, traffic flows)
• Define and enforce:
  • Cost allocation by SAP system, environment, and business unit
  • Monitor SAP infrastructure spend
  • Identify cost anomalies and optimisation opportunities
  • Support forecasting and budgeting for SAP landscapes
• Advise stakeholders on cost vs resilience vs performance trade‑offs
• Support ongoing cost optimisation post‑migration, not just initial design
• Deliver networking, IaaS, and cost‑governance automation using:
  • Terraform (preferred)
  • ARM / Bicep
• Build Azure DevOps pipelines for:
  • Network and connectivity provisioning
  • SAP infrastructure rollout
  • Enforce governance, cost controls, and consistency through code

Required Skills & Experience

Mandatory (Primary Screening Criteria)

• Strong ExpressRoute and hybrid connectivity experience
• Extensive experience as an Azure IaaS / Infrastructure Architect
• Azure Landing Zone design and implementation
• Strong FinOps / cost optimisation experience for Azure IaaS
• Infrastructure as Code (Terraform preferred)
• High availability and disaster recovery design

Preferred

• Led multiple SAP migration programs
• Strong Linux and Windows OS expertise for SAP
• Data‑centre to Azure network migration experience
• Experience advising customers on SAP cloud cost governance

Certifications (Preferred)

• Microsoft Certified: Azure Solutions Architect Expert (AZ‑305)
• FinOps Foundation Practitioner (nice to have)

#J-18808-Ljbffr…