Azure IaaS Cloud Architect – Azure Networking

Job Title:Azure IaaS Cloud Architect – Azure NetworkingJob DescriptionWe are seeking a Senior Azure IaaS Cloud Architect with Azure Networking as the primary skill, complemented by deep SAP on Azure IaaS experience and strong FinOps discipline. This role owns the network‑first, cost‑aware infrastructure architecture for SAP workloads on Azure, ensuring secure, high‑performance, highly available, and financially optimised Azure environments. The architect will design enterprise Azure networking, lead SAP migrations to Azure IaaS, and apply FinOps principles to control and optimise infrastructure spend across SAP landscapes.Primary Skill Area: Azure Networking (Critical & Mandatory)The successful candidatemust be a strong Azure Network Architect first, with SAP, IaaS, and FinOps capabilities built on top of this foundation.Azure Networking ResponsibilitiesArchitect and ownenterprise Azure networking designs, including:Hub‑and‑spoke topologyVirtual WAN (where applicable)DesignSAP‑optimised Azure network architectures, covering:VNet and subnet design per SAP tierLatency, throughput, MTU, and routing considerationsSAP inter‑tier communication flowsLeadhybrid connectivity architecture, including:ExpressRoute (mandatory, primary connectivity)Site‑to‑Site VPN (secondary / DR)Design and govern:Network Security Groups (NSGs)User Defined Routes (UDRs)Azure Firewall and/or NVAsArchitect secure ingress and egress using:Azure Load BalancerApplication Gateway (WAF)Define DNS, routing, and traffic‑flow strategies for SAP users, integrations, and management servicesEnsure networking aligns withZero Trust, enterprise security, and SAP certification requirementsAzure IaaS Architecture (Secondary, Cost‑Aware)Architectenterprise‑scale Azure IaaS platforms for SAP workloadsDesign and govern:SAP‑certified Azure Virtual MachinesManaged disks (Premium / Ultra)Availability Sets and Availability ZonesOwninfrastructure sizing, capacity planning, and performance tuning for SAP HANADefine OS‑level standards (Linux / Windows) for SAPDesignHA/DR‑ready infrastructure meeting strict RTO/RPO targetsSAP on Azure IaaS – Migration & RuntimeLeadSAP ECC and SAP S/4HANA migrations to Azure IaaSArchitect SAP‑certified designs including:ASCS/ERS high availabilityHANA scale‑up and scale‑outCross‑zone and cross‑region resilienceDesign SAP disaster recovery usingAzure Site RecoveryWork closely with SAP Basis teams to ensure SAP supportabilitySupport cutover, go‑live, and post‑migration stabilisationAzure Landing Zones – Network‑ & Cost‑CentricDesign and implementAzure Landing Zones with a network‑first and cost‑aware approachDefine:Management group and subscription hierarchyNetwork‑centric landing zone patternsShared services and connectivity hubsBuildSAP‑ready landing zones, ensuring:Network isolation per SAP tierControlled ingress/egressHybrid integration with on‑prem SAP landscapesAct as thedesign authority for Azure network, platform, and cost governance standardsFinOps & Cost Optimisation (Explicit Responsibility)EmbedFinOps principles into Azure IaaS and SAP architecture decisionsDesigncost‑optimised Azure network and infrastructure architectures, including:Right‑sizing SAP VMs and HANA instancesStorage tier selection and performance‑cost trade‑offsNetwork cost optimisation (ExpressRoute, egress, traffic flows)Define and enforce:Resource tagging standardsCost allocation by SAP system, environment, and business unitUseAzure Cost Management to:Monitor SAP infrastructure spendIdentify cost anomalies and optimisation opportunitiesSupport forecasting and budgeting for SAP landscapesAdvise stakeholders oncost vs resilience vs performance trade‑offsSupport ongoingcost optimisation post‑migration, not just initial designInfrastructure Automation & Azure DevOpsDelivernetworking, IaaS, and cost‑governance automation using:Terraform (preferred)ARM / BicepBuildAzure DevOps pipelines for:Landing zone deploymentNetwork and connectivity provisioningSAP infrastructure rolloutEnforce governance, cost controls, and consistency through codeRequired Skills & ExperienceMandatory (Primary Screening Criteria)Deep Azure Networking expertise (PRIMARY SKILL)Proven experience designingenterprise Azure network architecturesStrong ExpressRoute and hybrid connectivity experienceExtensive experience as anAzure IaaS / Infrastructure ArchitectProvenSAP on Azure IaaS experienceAzure Landing Zone design and implementationStrongFinOps / cost optimisation experience for Azure IaaSInfrastructure as Code (Terraform preferred)Azure DevOps CI/CD experienceHigh availability and disaster recovery designLocation:UK, Work at Home, GBLanguage Requirements:Time Type:Full timeIf you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California ResidentsOriginally posted on Himalayas