This job has closed.

Persepta · 1 day ago

Azure Infrastructure Architect/Engineer

Dallas, TX

Full-time

Hybrid

Senior Level

5+ years exp

Persepta is seeking an experienced Azure Infrastructure Architect/Engineer to lead the greenfield build-out of an Azure tenant environment supporting a hybrid Oracle-Azure data platform. This role involves establishing foundational Azure infrastructure, including tenant governance, security architecture, and networking for Oracle Database@Azure implementation.

ConsultingInformation ServicesInformation TechnologySoftware

No H1B

Responsibilities

Establish Azure tenant configuration aligned with enterprise standards

Implement comprehensive naming conventions across all resource types (subscriptions, resource groups, VNets, subnets, NSGs, storage accounts, etc.)

Configure Azure Policy for governance enforcement

Set up Management Groups and subscription hierarchy

Establish tagging strategy for cost allocation and resource management

Configure Azure Cost Management and budgets

Design and implement Azure Active Directory (Entra ID) integration

Configure Role-Based Access Control (RBAC) with least-privilege principles

Establish Privileged Identity Management (PIM) for administrative access

Implement Conditional Access policies

Configure Azure Security Center / Microsoft Defender for Cloud

Establish security baselines and compliance monitoring

Design and implement secrets management strategy (Azure Key Vault)

Configure diagnostic logging and Azure Monitor integration

Implement network security controls (NSGs, Azure Firewall as needed)

Design and deploy hub-spoke or mesh network topology

Configure Production subscription networking:

Virtual Network (VNet) with appropriate address spacing

Prod Resource Group network components

Subnet design for workload segregation

Configure Non-Production subscription networking:

Virtual Network with appropriate address spacing

Subnet architecture for Pre-Prod, QA, DEV, and Sandbox environments

Network segmentation between non-prod environments

Implement VNet peering between subscriptions (if required)

Configure DNS resolution (Azure Private DNS Zones)

Establish network connectivity to OCI (ExpressRoute/FastConnect or VPN)

Implement Private Endpoints for Azure PaaS services

Configure Network Security Groups with appropriate rule sets

Document IP addressing scheme and network topology

Deploy and configure Oracle GoldenGate on Azure (migration from OCI)

Provision appropriate Azure VMs or container infrastructure

Configure GoldenGate for replication from OCI Exadata

Establish secure connectivity to source databases

Deploy Oracle Connection Manager (CMAN) infrastructure

Configure connection pooling and routing

Implement secure database connectivity patterns

Configure network paths to OCI Exadata (Prod Compartment Exadata 1, Non-Prod Compartment Exadata 2)

Implement firewall rules and NSG configurations for Oracle traffic (SQLNet port 1521, GoldenGate ports)

Validate cross-cloud connectivity and latency requirements

Provision Azure Storage accounts for file-based data landing zones

Configure storage security (encryption, access policies, private endpoints)

Establish compute infrastructure for GoldenGate and Connection Manager

Document sizing and scaling recommendations

Create comprehensive as-built documentation

Develop runbooks for operational procedures

Provide knowledge transfer to KCC operations team

Document security architecture and network diagrams

Qualification

Azure infrastructureAzure networkingAzure identitySecurityInfrastructure as CodeOracle connectivityAzure Solutions Architect ExpertDocumentation skillsCommunication skills