Consulting and client strategy

• Act as a trusted advisor to client IT and business leaders, translating business goals into cloud and infrastructure roadmaps.

• Travel to client sites to lead discovery workshops, current-state assessments and gap analyses that turn into scoped, prioritized recommendations.

• Partner with sales and presales on solution design, effort estimates and statements of work, and present proposals to client executives.

• Identify follow-on opportunities across ProArch's managed services, security and data practices.

Azure cloud architecture

• Design secure, scalable Azure landing zones, identity, networking and governance aligned to the Cloud Adoption Framework and Well-Architected Framework.

• Plan and lead migrations and modernizations from on-premises and hybrid environments to Azure.

• Drive cost optimization and FinOps reviews covering Azure consumption and Microsoft licensing.

Microsoft OS and systems

• Architect and troubleshoot Windows Server and Windows client environments, including Active Directory, Group Policy and hybrid identity with Entra ID.

• Define endpoint management and patching strategy using Intune and related Microsoft tooling.

• Set standards for resilience, backup and disaster recovery.

Delivery and handoff

• Produce architecture documents, runbooks and executive-ready summaries.

• Travel for on-site solution delivery as engagements require, and guide engineers through implementation and ensure clean transition to managed services and SOC teams.

• Mentor engineers and contribute reusable patterns to the Consulting practice.

Requirements

• 7–10 years in infrastructure, systems or cloud engineering, with at least 3 years in an architect or lead role.

• 2+ years in a client-facing consulting, professional services or MSP environment, and willingness to travel for client outreach and on-site delivery.

• Proven delivery of at least one end-to-end Azure migration or modernization.

• Deep Infrastructure knowledge: Hypervisors, Windows Server and Windows client expertise: Active Directory, Group Policy, DNS/DHCP, hybrid identity with Entra ID.

• Hands-on Azure architecture across compute, storage, networking, identity, governance (Policy, RBAC, management groups) and monitoring.

• Ability to run workshops, write clear recommendations and present to executive audiences.

• Infrastructure-as-code and scripting with PowerShell plus Bicep, ARM or Terraform.

Preferred qualifications

• Zero Trust architecture and Conditional Access design.

• Experience with Microsoft 365 tenant architecture and licensing optimization (E3/E5, Azure reservations and savings plans).

• Exposure to Azure, AWS or multi-cloud environments.

• Industry experience in regulated sectors such as manufacturing, healthcare, financial services or energy.

• Microsoft Purview: data classification, sensitivity labels, DLP, information protection and compliance assessments.

• Microsoft Defender suite: Defender for Endpoint, Office 365, Identity, Cloud Apps and Defender for Cloud, including integration with Microsoft Sentinel and SOC operations.

• Certifications: AZ-305 (Azure Solutions Architect Expert), AZ-104, SC-100, SC-200 or SC-400.

• Bachelor's degree in a technical field, or equivalent experience.

Success in the first year

• Leads client assessments and architecture engagements independently within 90 days.

• Delivers engagements on scope and on budget with strong client satisfaction.

• Converts assessment findings into follow-on projects or managed services.

• Contributes reusable assessment templates and reference architectures to the practice.

Why ProArch

• Work directly with client leadership on high-impact Microsoft cloud and security programs.

• Collaborate with an in-house 24x7 SOC, managed services and data teams across the US, UK and India.

• Clear growth path toward principal architect or practice leadership.

• Certification support and access to Microsoft and AWS partner programs.