Azure Infra Architect

Job Title: Azure Infra Architect

Location: Warsaw or Cracow, Poland or remote in Poland.

Job Type: 6 Months contract with possible extension(Sub-con or B2B contract)

Job Responsibilities:

• Architect Azure Tenant Integration: Assess and provide recommendations based on Microsoft and SAP best practices to ensure seamless integration of the customer’s Azure environment with SAP RISE tenants.

• Conduct Architecture Reviews Evaluate existing customer Azure services and recommend improvements to support SAP RISE connectivity, reliability, and performance.

• Advise on Networking Design Guide customers on ExpressRoute, VPN Gateway, DNS, and hub‑and‑spoke architectures to ensure secure, performant, cross‑tenant SAP RISE connectivity.

• Identity & Access Management Guide integration with Microsoft Entra for authentication, RBAC, and single sign‑on capabilities for SAP applications.

• Security & Compliance Automation Provide security design recommendations and implement automated compliance controls through IaC, integrating Microsoft Sentinel, Azure Policies, and DevOps pipelines.

• Implementation & DevOps Automation Deploy Azure landing zones using Terraform, Bicep, and Ansible as Infrastructure as Code to automate provisioning, enforce policies, and establish secure, scalable foundations for SAP workloads.

• Hands-on Infrastructure as Code (IaC) Development Design, develop, and maintain IaC modules using Terraform, Bicep, and Git to automate Azure landing zones and SAP infrastructure deployments.

• Configuration Management & Automation Implement and manage automation scripts and Ansible playbooks to standardize SAP‑on‑Azure configurations and operational tasks.

• CI/CD Pipeline Enablement Build and maintain Git‑based CI/CD pipelines to streamline deployment workflows, enforce version control, and ensure consistent delivery across SAP RISE environments.

• Operational Efficiency Through Automation Drive operational excellence by automating monitoring, configuration validation, environment provisioning, and remediation using DevOps toolchains.

• Source Control & Repository Management Structure, maintain, and govern Git repositories for IaC modules, automation playbooks, and deployment pipelines, ensuring versioning, traceability, and code quality.

• Automation Framework Governance Define reusable templates, IaC patterns, and automation standards to improve repeatability, compliance, and scale across customer engagements.

• SAP BTP Connectivity Guidance Assist in designing secure and performant connectivity between SAP RISE and SAP Business Technology Platform (BTP).

• Customer & Partner Engagement Provide architectural recommendations to customers, partners, and SAP teams to support informed decision‑making and successful SAP RISE‑on‑Azure deployments.

• Documentation & Presentation Create technical documentation, assessment reports, and customer‑facing presentations outlining findings, recommended architectures, and integration patterns for SAP RISE on Azure.

• Skill Management & Deployment Identify required technical skills for engagements, align resources accordingly, and ensure effective deployment of architects and specialists while collaborating with the Global SAP RISE Lead.

Technical Skills

• Proven experience in Azure architecture, including designing and deploying SAP landscapes and SAP Basis workloads on Azure.
• Strong Cloud Architecture expertise, with the ability to design secure, scalable, resilient enterprise architectures across hybrid and multi‑cloud environments.
• Solid understanding and practical application of the Microsoft Azure Well‑Architected Framework, covering cost optimization, operational excellence, performance efficiency, reliability, and security.
• Strong understanding of Azure networking, identity, security, and governance, including VNets, ExpressRoute, Microsoft Entra, RBAC, Azure Firewall, and Azure Policy.
• Good understanding of SAP RISE architecture and operational models, including connectivity, lifecycle management, and SAP ECS integration patterns.
• Hands‑on Infrastructure as Code (IaC) development using Terraform, Bicep, and Ansible for environment provisioning, automation, configuration management, and policy enforcement.
• Python development for automation tooling, orchestrating deployment workflows, implementing CI/CD utility scripts, interacting with Azure SDKs/APIs, and extending automation modules.
• Practical experience with Git-based workflows, including repository structuring, branching strategies, code reviews, and CI/CD integration (Azure DevOps / GitHub Actions).
• Experience with SAP Basis administration, including operations, upgrades, performance optimization, and HA/DR scenarios on Azure.
• Expertise with Microsoft Entra, Microsoft Sentinel, and Azure Policy for identity governance, threat monitoring, and automated compliance enforcement.

Soft Skills

• Excellent communication and stakeholder management skills, capable of influencing and guiding cross-functional technical and business stakeholders.
• Strong presentation and workshop facilitation skills, able to simplify complex technical concepts for diverse audiences.

Certifications (Preferred)

• Azure certifications such as AZ‑900, AZ‑305, AZ‑500.
• Python or automation‑related learning credentials (optional).
• Infrastructure & DevOps certifications: Terraform Associate, Ansible certifications.
• AI, Python, or automation-focused learning credentials (nice to have).