Azure Infra Architect

Job Title: Azure Infra Architect

Location: Warsaw or Cracow, Poland or remote in Poland.

Job Type: 6 Months contract with possible extension(Sub-con or B2B contract)

Job Responsibilities:

•Architect Azure Tenant Integration: Assess and provide recommendations based on Microsoft and SAP best practices to ensure seamless integration of the customer’s Azure environment with SAP RISE tenants.

•Conduct Architecture Reviews Evaluate existing customer Azure services and recommend improvements to support SAP RISE connectivity, reliability, and performance.

•Advise on Networking DesignGuide customers on ExpressRoute, VPN Gateway, DNS, and hub‑and‑spoke architectures to ensure secure, performant, cross‑tenant SAP RISE connectivity.

• Identity & Access ManagementGuide integration with Microsoft Entra for authentication, RBAC, and single sign‑on capabilities for SAP applications.

•Security & Compliance Automation Provide security design recommendations and implement automated compliance controls through IaC, integrating Microsoft Sentinel, Azure Policies, and DevOps pipelines.

•Implementation & DevOps Automation Deploy Azure landing zones using Terraform, Bicep, and Ansible as Infrastructure as Code to automate provisioning, enforce policies, and establish secure, scalable foundations for SAP workloads.

•Hands-on Infrastructure as Code (IaC) Development Design, develop, and maintain IaC modules using Terraform, Bicep, and Git to automate Azure landing zones and SAP infrastructure deployments.

•Configuration Management & Automation Implement and manage automation scripts and Ansible playbooks to standardize SAP‑on‑Azure configurations and operational tasks.

•CI/CD Pipeline Enablement Build and maintain Git‑based CI/CD pipelines to streamline deployment workflows, enforce version control, and ensure consistent delivery across SAP RISE environments.

•Operational Efficiency Through Automation Drive operational excellence by automating monitoring, configuration validation, environment provisioning, and remediation using DevOps toolchains.

•Source Control & Repository Management Structure, maintain, and govern Git repositories for IaC modules, automation playbooks, and deployment pipelines, ensuring versioning, traceability, and code quality.

•Automation Framework GovernanceDefine reusable templates, IaC patterns, and automation standards to improve repeatability, compliance, and scale across customer engagements.

•SAP BTP Connectivity GuidanceAssist in designing secure and performant connectivity between SAP RISE and SAP Business Technology Platform (BTP).

•Customer & Partner EngagementProvide architectural recommendations to customers, partners, and SAP teams to support informed decision‑making and successful SAP RISE‑on‑Azure deployments.

•Documentation & PresentationCreate technical documentation, assessment reports, and customer‑facing presentations outlining findings, recommended architectures, and integration patterns for SAP RISE on Azure.

•Skill Management & DeploymentIdentify required technical skills for engagements, align resources accordingly, and ensure effective deployment of architects and specialists while collaborating with the Global SAP RISE Lead.

Technical Skills

• Proven experience in Azure architecture, including designing and deploying SAP landscapes and SAP Basis workloads on Azure.
• Strong Cloud Architecture expertise, with the ability to design secure, scalable, resilient enterprise architectures across hybrid and multi‑cloud environments.
• Solid understanding and practical application of the Microsoft Azure Well‑Architected Framework, covering cost optimization, operational excellence, performance efficiency, reliability, and security.
• Strong understanding of Azure networking, identity, security, and governance, including VNets, ExpressRoute, Microsoft Entra, RBAC, Azure Firewall, and Azure Policy.
• Good understanding of SAP RISE architecture and operational models, including connectivity, lifecycle management, and SAP ECS integration patterns.
• Hands‑on Infrastructure as Code (IaC) development using Terraform, Bicep, and Ansible for environment provisioning, automation, configuration management, and policy enforcement.
• Python development for automation tooling, orchestrating deployment workflows, implementing CI/CD utility scripts, interacting with Azure SDKs/APIs, and extending automation modules.
• Practical experience with Git-based workflows, including repository structuring, branching strategies, code reviews, and CI/CD integration (Azure DevOps / GitHub Actions).
• Experience with SAP Basis administration, including operations, upgrades, performance optimization, and HA/DR scenarios on Azure.
• Expertise with Microsoft Entra, Microsoft Sentinel, and Azure Policy for identity governance, threat monitoring, and automated compliance enforcement.

Soft Skills

• Excellent communication and stakeholder management skills, capable of influencing and guiding cross-functional technical and business stakeholders.
• Strong presentation and workshop facilitation skills, able to simplify complex technical concepts for diverse audiences.

Certifications (Preferred)

• Azure certifications such as AZ‑900, AZ‑305, AZ‑500.
• Python or automation‑related learning credentials (optional).
• Infrastructure & DevOps certifications:Terraform Associate,Ansible certifications.
• AI, Python, or automation-focused learning credentials (nice to have).