Solutions Architect

Position Overview: We are seeking an experienced Solutions Architect to support the design and delivery of secure, scalable and resilient Microsoft Azure environments that support critical defence platforms. You will work with colleagues and stakeholders from a range of disciplines, based around the world, to shape mission-focused cloud strategies that meet strict security and performance requirements. Responsibilities Design, build and maintain Azure Mission Environments using Infrastructure as Code (Terraform and/or Bicep), aligned to the Cloud Adoption Framework and customer security requirements. Design secure, performant solutions to integrate sensors and data with Mission Environments that scale, have resilience and cost efficiency. Engineer and operate Azure networking, including: i. Hub-and-spoke and Virtual WAN topologies, VNet peering and route tables (UDRs) and vWAN ii. Azure Firewall, NSGs, Application Gateway / WAF and Front Door iii. Private Endpoints, Private Link and Private DNS zone design iv. Hybrid connectivity: site-to-site VPN, ExpressRoute and BGP routing Design, configure and manage Cloudflare services, including: i. DNS management and zone configuration ii.Firewall rules, rate limiting, bot management and DDoS protection iii. Cloudflare Zero Trust / Access, Tunnels and secure application publishing iv. Certificate and TLS configuration, caching and performance tuning v. Managing Cloudflare configuration as code Build and maintain CI/CD pipelines for infrastructure, software solutions and platform deployments, including plan/apply workflows, approvals, testing and drift detection. Implement and enforce governance through Azure Policy, management group hierarchy, RBAC, Privileged Identity Management and tagging and cost standards. Implement platform security controls, including Microsoft Defender for Cloud, Key Vault, managed identities, diagnostic logging and Microsoft Sentinel integration. Build observability with Azure Monitor, Log Analytics, Grafana and alerting, ensuring platforms are supportable and evidence is available for assurance. Act as a Level 2/3 escalation point for complex platform, networking and connectivity issues, leading root cause analysis and permanent fixes. Act as a point of contact for downstream data consumers of the platforms. Lead integration of emerging capabilities – such as mobile platforms and zero-trust architectures – into legacy or hybrid estates. Collaboratively work with wider Atreides Engineering teams on product updates and feedback. Drive operational excellence through monitoring, capacity planning and cost control across cloud workloads. Collaborate with Defence partners, third-party vendors and internal teams to ensure solutions meet programme requirements and security mandates. Maintain architecture standards, patterns and run-books to support audit readiness, compliance and onboarding. Required Qualifications: Deep expertise in Azure architecture, infrastructure and engineering, including landing zone design and Azure Policy A strong grounding in networking (VPNs, firewalls, routing, switching and ExpressRoute) and in security-by-design principles Strong infrastructure-as-code experience with Terraform and/or Bicep, including writing reusable modules, managing state and promoting changes safely across environments Excellent communication skills, with the ability to explain complex technical concepts clearly to both engineers and non-technical stakeholders Experience supporting defence, intelligence or government clients, ideally in secure or classified environments A Microsoft Azure certification, such as AZ-104 (Azure Administrator Associate) or AZ-305 (Azure Solutions Architect Expert), or equivalent hands-on experience Eligibility Requirements Right to work in Denmark: because of defence sector restrictions, candidates must be EU/EEA nationals or already hold a Danish work permit Security clearance: you must be eligible for Danish SECRET clearance. Atreides will sponsor the vetting process for the successful candidate. Nice to Have Azure certifications: AZ-400 (Azure DevOps Engineer Expert), AZ-500 (Azure Security Engineer Associate) or AZ-700 (Azure Network Engineer Associate) Experience using Python for infrastructure automation CCNA or an equivalent networking qualification Working proficiency in Danish