12 Month contract opportunity
Flight Centre Travel Group (FCTG) our purpose is to 'open up the world for those who want to see'. Every day, we give people all around the world the opportunity to experience something really amazing – travel!
Cloud Infrastructure Solution Architect
As a Cloud Infrastructure Solution Architect, you will be a dedicated specialist within our Enterprise Technology Services (ETS) team. Your mission is to bridge the gap between high‐level domain architecture and technical engineering, ensuring our cloud foundations are secure, scalable, and interconnected.
You will operate across two critical dimensions: externally, designing the complex \"wiring\" between global tenants, systems, and cloud services; and internally, collaborating with Domain Solution Architects to own and refine the infrastructure components of every solution design. You will act as the primary conduit between the architecture practice and our engineering delivery teams, translating logical designs into robust, deployable technical specifications.
Day in the Life
* Design Cross‐Tenant Connectivity: Lead the architectural design for networking between global tenants (including UK, EU, and partner networks), managing hub‐spoke topologies, VNet peering, and private endpoints
* Translate Architecture to Engineering: Work alongside Domain SAs to own the infrastructure layer of solution designs. Translate logical architectures into engineer‐ready specs, including topology diagrams, deployment architectures, and NFRs
* Architect Identity & Access: Design identity‐in‐from‐the‐start solutions using Entra ID (formerly Azure AD), managed identities, RBAC, and conditional access policies
* Security‐by‐Design: Apply Zero Trust principles and threat modelling at the infrastructure layer, ensuring all designs align with security policies while enabling rapid delivery
* Govern Environment Patterns: Define and maintain standard Azure environment patterns, landing zone templates, and resource tagging conventions to ensure engineering consistency
* Legacy Infrastructure Assessment: Evaluate the infrastructure dependencies of critical legacy systems, identifying risks and defining technical requirements for modernisation or migration
* Delivery Shepherding & Scoping: Act as a technical conduit for delivery partners, pre‐consulting on infrastructure tickets to ensure they are correctly scoped and reducing rework
* Practice Integration: Participate in Design Authority and review gates, ensuring infrastructure design input is captured before build commences
* Cost & Operational Optimisation: Design for supportability and efficiency, assessing the run‐cost implications of Azure service choices (e.g., Service Bus vs Event Grid) and infrastructure sizing
Qualifications
* 7‐10 years in IT architecture, with a heavy focus on cloud infrastructure, networking, and security implementation
* Deep Azure Expertise: Expert‐level knowledge of Azure network design (hub‐spoke, DNS resolution, ingress/egress patterns) and platform services (Functions, Container Apps, Cosmos DB)
* Identity Mastery: Proven experience with Entra ID, service principal governance, and Key Vault patterns in a complex enterprise environment
* Technical Translation Skills: Ability to take a high‐level business solution and produce detailed infrastructure diagrams and specifications that engineers can act on without ambiguity
* Security Mindset: Practical experience with vulnerability management tools and a strong understanding of encryption and infrastructure‐level security controls
* Hybrid & Cross‐Tenant Experience: Specific experience managing connectivity and identity across multiple distinct cloud tenants and legacy on‐premise environments
* Collaborative Influence: Experience working within an embedded architecture practice, influencing both application architects and engineering leads
* Infrastructure as Code (IaC): Familiarity with Terraform, Bicep, or ARM templates to support automated, repeatable patterns
* Education & Certification: Bachelor's degree in Computer Science or IT. Relevant certifications (Azure Solutions Architect Expert, AZ‐700 Network Engineer, or TOGAF) are highly regarded
Key Competencies
* Azure Network Design & Hybrid Connectivity
* Identity & Access Management (IDAM) Architecture
* Security‐by‐Design & Threat Modelling
* Infrastructure Specification & Diagramming
* Cloud Cost Management & Supportability Design
Benefits
Development: Individualised Learning & Development pathway options and access to LinkedIn Learning for ongoing skill development.
Exclusive Staff Discounts: Employee‐only portal with discounts on retailers, health and wellness, financial planning advice, and employee share plan.
Travel Discounts: Flights, hotels, tours, cruises, and travel insurance for family and friends.
Career Opportunities: Promotion from within across a network of brands and businesses worldwide.
Corporate Health Discounts: Access to partner health insurance plans for you and your family and internal gym access.
Mental Health: Support and Employee Assistance Program for staff and family.
Social: Regular awards nights, team‐building, industry events, and an opportunity to attend global conferences.
Giving Back: Corporate Social Responsibility program supporting nominated charities through workplace giving, volunteering and fundraising; paid parental and volunteer leave.
Sustainability: Efforts to protect the environment as a leading travel group.
FCTG is an Equal Opportunity Employer and encourages all suitably qualified applicants to apply, including Aboriginal and Torres Strait Islander People, people from racial, ethnic, or ethno‐religious minority groups, and people with disability.
#J-18808-Ljbffr