Infrastructure Architect

The Infrastructure Architect is responsible for the design, implementation, and ongoing operation of Stallion’s hybrid IT infrastructure, with a primary focus on the Microsoft Azure cloud environment. This role owns cloud architecture across production, development, and disaster recovery environments, along with the network security, identity, backup, and connectivity services the business depends on. The Infrastructure Architect leads modernization initiatives from evaluation through production operation, independently resolves complex multi-layered technical issues, and works with internal teams and external vendors to deliver reliable, secure, and cost-effective infrastructure. This position reports to the Director of Technology. THIS IS AN IN OFFICE POSITION LOCATED IN HOUSTON, TEXAS. 

Role Priorities / Responsibilities:

• Designs, builds, and maintains Microsoft Azure infrastructure, including virtual networking (VNets, NSGs, route tables, load balancers, VPN gateways), compute, storage, and platform services.
• Owns cloud architecture across multiple Azure regions and environments (production, development, disaster recovery), applying consistent design standards across each.
• Designs and deploys Azure managed services (e.g., managed databases, caching, file and object storage), including high availability and disaster recovery decisions.
• Provides the infrastructure foundation for business-critical integration and AI platforms, including private endpoints, DNS, and access controls.
• Manages Azure cost optimization, including reservations, right-sizing, and capacity planning.
• Administers Microsoft Entra ID and Azure role-based access control, including custom roles, application registrations, SSO integrations, and MFA.
• Maintains on-premises Active Directory, DNS, and DHCP in a multi-domain-controller environment, including replication health and role placement.
• Designs and administers firewall and network security infrastructure across corporate, datacenter, and field locations, including firewall policy, high availability, remote-access and site-to-site VPN, SD-WAN, and routing.
• Architects and maintains disaster recovery capabilities, including cross-region replication, failover design, and periodic DR testing.
• Ensures backup coverage across server and cloud workloads, and oversees endpoint security, vulnerability management, and SIEM integration.
• Leads migration and modernization initiatives, including on-premises-to-cloud migrations, legacy platform retirement, and evaluation and replacement of aging tools.
• Supports new site openings, site closures, and acquisitions, including network buildouts, circuit provisioning, telephony (UCaaS), and integration into company standards.
• Maintains a recurring security and operations cadence: scheduled patching, CVE-driven emergency remediation, firmware upgrades, credential rotation, certificate and license renewals, and device compliance.
• Manages infrastructure vendors and contracts, including licensing renewals, ISP/circuit providers, and third-party security assessments and remediation.
• Creates and maintains documentation of environment architecture, network configuration, standard procedures, and security findings.
• Develops scripts and automation (e.g., PowerShell, Azure CLI, REST APIs) to reduce recurring manual work.
• Plans and tracks infrastructure work through a formal project management process (e.g., sprint planning, backlog management).
• Provides Level 3-tier support in troubleshooting to resolve issues.
• Participates in proof of concepts to assist in defining technology direction and enabling business strategy.
• Selects and implements security tools, policies, and procedures to help enforce system standards.
• After hours, weekend work occasionally required during off-hours maintenance windows.
• Performs other related duties as assigned
   

Essential Experience, Knowledge, Skills and Abilities:

•  Deep hands-on experience designing and operating Microsoft Azure infrastructure, including networking, compute, storage, and identity (Entra ID, RBAC).
• Working knowledge of Azure platform services, cost management, monitoring, and governance.
• Solid understanding of firewall and network security concepts, including stateful inspection, policy design, NAT, high availability, and IPsec/SSL VPN.
• A thorough understanding of networking protocols and concepts (e.g., TCP/IP, OSI model, DNS, DHCP, BGP, VLANs, 802.1X).
• Ability to independently root-cause complex, multi-layered issues spanning cloud, network, operating system, and application layers.
• Thorough knowledge of Windows Server and Active Directory in a multi-domain-controller environment; Linux administration experience.
• Strong PowerShell scripting skills; comfortable with command-line tools and APIs.
• Experience with backup, replication, and disaster recovery platforms and with designing for high availability.
• Experience with virtualization and migrating workloads from on-premises environments to the cloud.
• Track record of owning infrastructure projects end-to-end and leading the replacement of legacy platforms.
• Ability to manage and escalate to external vendors (cloud, licensing, circuit, and security providers) and coordinate vendor technicians at Stallion locations.
• Ability to collaborate with internal teams to diagnose problems and present resolutions.
• Ability to create change management and follow procedures to ensure high availability.
• Ability to work independently and to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
• Ability to work in a team environment.
  

Preferred Qualifications, Education or Certifications (if applicable):

•  Bachelor degree in Computer Science or a related discipline preferred.
• Minimum 4 years’ experience in infrastructure engineering or architecture, including hands-on Microsoft Azure administration.
• Microsoft Azure certifications (e.g., AZ-104, AZ-305, AZ-500) preferred.
• Fortinet experience (e.g., FortiGate, FortiManager, FortiClient EMS) and/or Fortinet NSE certifications a plus.
• Experience with enterprise backup and DR/replication platforms (e.g., Commvault, Veeam, Zerto) a plus.
• Exposure to integration middleware or AI platform infrastructure (e.g., Azure AI Foundry) a plus.
• Experience with UCaaS administration and physical site network buildouts a plus.
• Python scripting and Azure DevOps (or similar work tracking) experience a plus.

Other Requirements:

• Applicants must possess valid identification.
• Stallion is a drug-free workplace, a pre-employment drug screening will be administered.
• This employment is subsumed under the Stallion Legal department, thus all applicants must possess a clean criminal history.
• Stallion is an Equal Opportunity Employer.