Senior Azure & Microsoft 365 Technical Architect Hybrid

PBI
’s flagship products and services, PBI Axiom, PBI Vector, and PBI Stratus, enable alternative asset managers to address their data challenges in analytics, workflow, governance, and security.

We are looking for hands‑on Senior Azure & Microsoft 365 Technical Architect.

The successful candidate will act as the technical owner of the Azure platform, working closely with external development and engineering partners. They will ensure that deployed systems align with the intended architecture, support secure and stable operations, and improve ownership across Identity and Access Management, Disaster Recovery, and Monitoring and Observability.

• Oversee Azure subscriptions, landing zones, networking, compute, databases and Microsoft 365 tenant configuration, including dependencies between current and legacy platforms
• Validate deployed infrastructure against documented architecture and security requirements, including ingress, DNS, certificates and platform access controls
• Review Entra , Conditional Access, authentication flows, RBAC, PIM, emergency access, service identities and guest/B2B and client‑facing identities. Ensure least‑privilege access, effective joiner/mover/leaver processes, recurring access reviews and removal of orphaned identities
• Reconcile permissions and access dependencies across Microsoft 365, Azure, Azure Dev Ops and applications; oversee Key Vault, secrets, certificates and rotation
• Assess and improve disaster recovery, including recovery units, shared dependencies, RTOs/RPOs, backups, database replication, point‑in‑time restoration and multi‑region design. Run restore and failover exercises covering invocation, validation and return to primary, maintaining runbooks, responsibilities and test evidence
• Improve service‑health monitoring using Azure Monitor, Log Analytics, KQL and Application Insights. Map services to monitoring signals, tune alerts for actionability, routing and ownership, and distinguish customer‑facing status from operational diagnostics
• Troubleshoot production issues across infrastructure, applications, APIs and integrations, maintaining practical runbooks and technical documentation
• Maintain Terraform configurations, modules and state; detect configuration drift, support Azure Dev Ops pipelines and permissions, and develop Power Shell scripts and automation
• Apply Azure Policy and landing‑zone guardrails, maintain tagging, naming and subscription standards, and improve cost management, including telemetry retention and access
• Act as the internal technical counterpart to external providers, constructively challenge proposed changes and communicate gaps, risks and recommendations clearly to technical and non‑technical stakeholders.

• Strong hands‑on experience with both Microsoft Azure and Microsoft 365
  , including Azure platform engineering, Microsoft 365 tenant administration and security configuration, Active Directory servers, and email security/spam filtering (Mimecast)
• Experience spanning cloud architecture, engineering and operations in business‑critical production environments
• Experience supporting financial‑services cloud environments, including cloud cost optimisation and Fin Ops
• Strong knowledge of Entra , Conditional Access, Azure RBAC, PIM, Key Vault and identity and access governance across connected platforms
• Practical knowledge of Azure networking, ingress, compute and databases, including backup, replication and restoration
• Experience assessing and validating disaster recovery, including dependency mapping, RTOs/RPOs, recovery procedures, restore testing and regional failover
• Experience with Azure Monitor, Log Analytics, KQL and Application Insights, including service‑health monitoring, alert tuning and troubleshooting…