Consulting and client strategy
• Act as a trusted advisor to client IT and business leaders, translating business goals into cloud and infrastructure roadmaps.
• Travel to client sites to lead discovery workshops, current-state assessments and gap analyses that turn into scoped, prioritized recommendations.
• Partner with sales and presales on solution design, effort estimates and statements of work, and present proposals to client executives.
• Identify follow-on opportunities across ProArch's managed services, security and data practices.
Azure cloud architecture
• Design secure, scalable Azure landing zones, identity, networking and governance aligned to the Cloud Adoption Framework and Well-Architected Framework.
• Plan and lead migrations and modernizations from on-premises and hybrid environments to Azure.
• Drive cost optimization and FinOps reviews covering Azure consumption and Microsoft licensing.
Microsoft OS and systems
• Architect and troubleshoot Windows Server and Windows client environments, including Active Directory, Group Policy and hybrid identity with Entra ID.
• Define endpoint management and patching strategy using Intune and related Microsoft tooling.
• Set standards for resilience, backup and disaster recovery.
Delivery and handoff
• Produce architecture documents, runbooks and executive-ready summaries.
• Travel for on-site solution delivery as engagements require, and guide engineers through implementation and ensure clean transition to managed services and SOC teams.
• Mentor engineers and contribute reusable patterns to the Consulting practice.
Requirements
• 7–10 years in infrastructure, systems or cloud engineering, with at least 3 years in an architect or lead role.
• 2+ years in a client-facing consulting, professional services or MSP environment, and willingness to travel for client outreach and on-site delivery.
• Proven delivery of at least one end-to-end Azure migration or modernization.
• Deep Infrastructure knowledge: Hypervisors, Windows Server and Windows client expertise: Active Directory, Group Policy, DNS/DHCP, hybrid identity with Entra ID.
• Hands-on Azure architecture across compute, storage, networking, identity, governance (Policy, RBAC, management groups) and monitoring.
• Ability to run workshops, write clear recommendations and present to executive audiences.
• Infrastructure-as-code and scripting with PowerShell plus Bicep, ARM or Terraform.
Preferred qualifications
• Zero Trust architecture and Conditional Access design.
• Experience with Microsoft 365 tenant architecture and licensing optimization (E3/E5, Azure reservations and savings plans).
• Exposure to Azure, AWS or multi-cloud environments.
• Industry experience in regulated sectors such as manufacturing, healthcare, financial services or energy.
• Microsoft Purview: data classification, sensitivity labels, DLP, information protection and compliance assessments.
• Microsoft Defender suite: Defender for Endpoint, Office 365, Identity, Cloud Apps and Defender for Cloud, including integration with Microsoft Sentinel and SOC operations.
• Certifications: AZ-305 (Azure Solutions Architect Expert), AZ-104, SC-100, SC-200 or SC-400.
• Bachelor's degree in a technical field, or equivalent experience.
Success in the first year
• Leads client assessments and architecture engagements independently within 90 days.
• Delivers engagements on scope and on budget with strong client satisfaction.
• Converts assessment findings into follow-on projects or managed services.
• Contributes reusable assessment templates and reference architectures to the practice.
Why ProArch
• Work directly with client leadership on high-impact Microsoft cloud and security programs.
• Collaborate with an in-house 24x7 SOC, managed services and data teams across the US, UK and India.
• Clear growth path toward principal architect or practice leadership.
• Certification support and access to Microsoft and AWS partner programs.