Senior Azure Architect

Hello; Job Title: Senior Azure Architect Duration: Long Term Location: Remote Experience Required: 12-16 years (8+ years of hands-on Azure architecture, with at least 3 years in energy, oil and gas, or other asset-heavy industries) Architecture and Strategy Define and own the Azure reference architecture and multi-year cloud roadmap, aligned to the company's operational and digital transformation goals. Design enterprise landing zones using the Cloud Adoption Framework, with management group and subscription strategy, hub-and-spoke or Virtual WAN networking, and policy baselines. Include separate zones for IT, OT-adjacent and regulated workloads. Lead architecture reviews and give formal sign-off on major workloads and changes. Evaluate new Azure services and third-party tools and make build-vs-buy recommendations. Oil and Gas Platforms and Data Architect subsurface and E&P data platforms, including OSDU-based environments and Microsoft Energy Data Services, for seismic, well and reservoir data. Design high-performance compute and storage for seismic processing and reservoir simulation, including burst-to-cloud patterns and tiered storage for multi-petabyte datasets. Architect SAP landscapes on Azure (S/4HANA and related systems) with the HA/DR designs these workloads need. Build data platforms for production, asset and operations analytics using Data Factory, Databricks, Synapse or Fabric, and integrate with historian systems such as AVEVA PI. Enable predictive maintenance, production optimisation, digital twin and emissions/ESG reporting use cases with the data and AI teams. IT/OT Convergence and Edge Design secure IT/OT connectivity between operational sites (wells, platforms, pipelines, terminals, refineries) and Azure, following Purdue-model segmentation and DMZ patterns. Architect edge and hybrid solutions for remote and offshore locations using Azure IoT Hub, Azure IoT Operations, Azure Arc and Azure Stack, designed to keep operating when connectivity drops. Design for constrained links (satellite, microwave, low bandwidth), with local buffering and store-and-forward. Work with OT engineering and control-systems teams so cloud changes never put safety or process control at risk. Security, Identity and Compliance Architect identity and access with Microsoft Entra ID, conditional access, privileged identity management and strict RBAC, including third-party and contractor access models common in the industry. Embed security by design: Defender for Cloud (including Defender for IoT/OT), Key Vault, private endpoints, segmentation, encryption and Zero Trust. Align designs to relevant frameworks and regulations, such as IEC 62443, NIST CSF, ISO 27001 and applicable pipeline and critical-infrastructure cyber regulations, as well as data residency and export-control requirements. Reliability, Operations and Cost Design HA and DR for business-critical and operations-adjacent systems, with defined RTO/RPO targets and tested failover. Set observability standards using Azure Monitor, Log Analytics and Grafana, integrated with the operations centre. Own FinOps practices, including cost governance, tagging, reservations, and storage and compute optimisation for data-heavy workloads. Provide architectural escalation support on Sev1/Sev2 incidents and drive design fixes after major events. Automation and DevOps Set standards for Infrastructure as Code (Terraform and/or Bicep), CI/CD (Azure DevOps or GitHub Actions) and policy-as-code. Define reusable modules and secure deployment patterns for engineering and application teams. Leadership and Collaboration Mentor cloud engineers and junior architects, and partner with Security, Network, OT, Data, Application and Finance stakeholders. Present architecture decisions and trade-offs to senior leadership, and to business owners in exploration, production, supply and trading, or refining. Maintain architecture documentation, decision records and diagrams. Required Qualifications 12-16 years in IT infrastructure or cloud engineering, with 8+ years of hands-on Azure architecture experience. Proven delivery of enterprise Azure environments: multi-subscription landing zones, hybrid connectivity (ExpressRoute, VPN) and large migrations. Experience in oil and gas, energy, utilities, mining or other asset-heavy industry, with understanding of how OT and IT differ in risk, change control and availability expectations. Deep expertise across Azure compute, networking, storage, identity and security services. Strong Infrastructure as Code skills (Terraform and/or Bicep) and CI/CD experience. Experience designing for large-scale data platforms and for HA/DR of mission-critical systems. Working knowledge of OT security principles (Purdue model, network segmentation, IEC 62443 concepts). Excellent communication, ability to work credibly with both IT and operations stakeholders. Azure Solutions Architect Expert (AZ-305) or equivalent hands-on credibility. Preferred Qualifications Experience with OSDU, Microsoft Energy Data Services, or subsurface/seismic data platforms. SAP on Azure experience, ideally with an Azure for SAP Workloads specialty certification. Experience with historian and industrial data platforms (AVEVA PI, Aspen, or similar), SCADA integration, and Azure IoT or Azure Arc edge deployments. Familiarity with HPC on Azure (CycleCloud, Batch, or similar) and high-performance storage. DevOps Engineer Expert (AZ-400) and Azure Security Engineer (AZ-500). Exposure to digital twins, predictive maintenance, emissions monitoring, or Azure OpenAI/AI platforms in an industrial setting. Multi-cloud exposure (AWS or GCP) and TOGAF or equivalent architecture certification. Experience supporting remote, offshore or international operations across multiple jurisdictions.