Infrastructure Architect

950 Corbindale Road Suite 400, Houston , Texas 77024 , United States

The Infrastructure Architect is responsible for the design, implementation, and ongoing operation of Stallion’s hybrid IT infrastructure, with a primary focus on the Microsoft Azure cloud environment. This role owns cloud architecture across production, development, and disaster recovery environments, along with the network security, identity, backup, and connectivity services the business depends on. The Infrastructure Architect leads modernization initiatives from evaluation through production operation, independently resolves complex multi-layered technical issues, and works with internal teams and external vendors to deliver reliable, secure, and cost-effective infrastructure.

This position reports to the Director of Technology. THIS IS AN IN OFFICE POSITION LOCATED IN HOUSTON, TEXAS.

• Designs, builds, and maintains Microsoft Azure infrastructure, including virtual networking (VNets, NSGs, route tables, load balancers, VPN gateways), compute, storage, and platform services.
• Owns cloud architecture across multiple Azure regions and environments (production, development, disaster recovery), applying consistent design standards across each.
• Designs and deploys Azure managed services (e.g., managed databases, caching, file and object storage), including high availability and disaster recovery decisions.
• Provides the infrastructure foundation for business-critical integration and AI platforms, including private endpoints, DNS, and access controls.
• Manages Azure cost optimization, including reservations, right-sizing, and capacity planning.
• Administers Microsoft Entra  Azure role-based access control, including custom roles, application registrations, SSO integrations, and MFA.
• Maintains on-premises Active Directory, DNS, and DHCP in a multi-domain-controller environment, including replication health and role placement.
• Designs and administers firewall and network security infrastructure across corporate, datacenter, and field locations, including firewall policy, high availability, remote-access and site-to-site VPN, SD-WAN, and routing.
• Architects and maintains disaster recovery capabilities, including cross-region replication, failover design, and periodic DR testing.
• Ensures backup coverage across server and cloud workloads, and oversees endpoint security, vulnerability management, and SIEM integration.
• Leads migration and modernization initiatives, including on-premises-to-cloud migrations, legacy platform retirement, and evaluation and replacement of aging tools.
• Supports new site openings, site closures, and acquisitions, including network buildouts, circuit provisioning, telephony (UCaaS), and integration into company standards.
• Maintains a recurring security and operations cadence: scheduled patching, CVE-driven emergency remediation, firmware upgrades, credential rotation, certificate and license renewals, and device compliance.
• Manages infrastructure vendors and contracts, including licensing renewals, ISP/circuit providers, and third-party security assessments and remediation.
• Creates and maintains documentation of environment architecture, network configuration, standard procedures, and security findings.
• Develops scripts and automation (e.g., Power Shell, Azure CLI, REST APIs) to reduce recurring manual work.
• Plans and tracks infrastructure work through a formal project management process (e.g., sprint planning, backlog management).
• Provides Level 3-tier support in troubleshooting to resolve issues.
• Participates in proof of concepts to assist in defining technology direction and enabling business strategy.
• Selects and implements security tools, policies, and procedures to help enforce system standards.
• After hours, weekend work occasionally required during off-hours maintenance windows.
• Performs other related duties as assigned

• Deep hands-on experience designing and operating Microsoft Azure infrastructure, including networking, compute, storage, and identity (Entra , RBAC).
• Working knowledge of Azure platform services, cost management, monitoring, and governance.
• Solid understanding of firewall and network security concepts, including stateful inspection, policy design, NAT, high availability, and IPsec/SSL VPN.
• A thorough understanding of networking protocols and concepts (e.g., TCP/IP, OSI model, DNS, DHCP, BGP, VLANs, 802.1X).
• Ability to independently…