Cloud Architect

Position: Azure Cloud Architect

Location: Remote - Brazil (EST time zone)

Contract: 6 month+ extensions

This is a remote role, with a preference for candidates based in the U.S. Eastern Time zone.

You’ll architect, design, build, and troubleshoot cloud solutions across a hybrid cloud platform, partnering with our Global Infrastructure, Security, Network, Enterprise, Application, and Data teams to ensure everything we ship is secure, compliant, and aligned with company standards and our global cloud strategy.

Day to day, you will:

• Lead application modernization — re-platform and refactor workloads from IaaS to PaaS to improve scalability, cost efficiency, and maintainability.
• Serve as Level 3 (L3) escalation for complex infrastructure issues, driving deep root-cause analysis and resolving problems that lower support tiers can’t.
• Design secure-by-default architectures — embed zero-trust principles, defense-in-depth, identity and access management, network segmentation, and data protection into every solution from the start.
• Partner with Security Architects on threat modeling and design reviews and ensure solutions meet Sodexo security standards and relevant compliance requirements.
• Assess the technical impact of new solutions and how they integrate into the existing ecosystem, including impact assessments for new projects and technologies.
• Design technical architectures with a clear focus on user experience, scalability, standardization, cost, and security.
• Build cost-optimized designs — right-size resources, select the most cost-effective service tiers and pricing models (reserved capacity, autoscaling, PaaS consumption), and apply FinOps practices so solutions stay efficient as they scale.
• Scope multiple concurrent projects accurately and deliver on time.
• Identify process and knowledge gaps and work across teams to close them.
• Map business and technology dependencies and collaborate with cross-functional teams to deliver solutions quickly.
• Produce technical documentation and architecture diagrams.
• Recommend solutions grounded in Sodexo Global Standards to keep consistency through this period of change.
• Advise on how and where Cloud Platforms can be used across the Sodexo ecosystem and guide architectural choices in line with global standards.
• Deliver end-to-end cloud infrastructure architectures and designs using modern capabilities such as PaaS.
• Partner with architects across other disciplines (Enterprise, Data, Security, Network, Application) and engage the broader Cloud Competency Center community across regions.
• Manage partner relationships and coordinate development efforts across multiple teams.
• Champion the architectural standards set by the Global Cloud Competency Center and ensure alignment with global Enterprise Architecture principles.

Required

• Azure architecture expertise — proven ability to design and implement cloud infrastructure, platforms, and applications.
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) or equivalent.
• 5+ years in an Azure architecture role spanning IaaS, PaaS, and integrations.
• 10+ years overall in cloud and IT infrastructure architecture.
• Hands-on experience modernizing applications from IaaS to PaaS — re-platforming and refactoring workloads onto managed Azure services.
• Experience with Azure AI services and assets — e.g., Azure OpenAI, Azure AI Foundry, Azure Machine Learning, Azure AI Search, and Cognitive Services — including how to architect, integrate, and secure them within the enterprise landing zone.
• Proven ability to troubleshoot complex infrastructure issues such as L3 escalation, including root-cause analysis through resolution.
• Strong grasp of cloud security architecture: identity and access management (Microsoft Entra ID / RBAC), network security (segmentation, NSGs, private endpoints, firewalls), encryption at rest and in transit, key management, tenant isolation, vulnerability management, and SIEM.
• Hands-on with Azure-native security and governance tooling — Microsoft Defender for Cloud, Microsoft Sentinel, Key Vault, Azure Policy — and secure landing zone design.
• Hands-on background administering Windows Server, Linux, and the Azure Portal.
• Cloud cost optimization / FinOps experience — cost modeling, right-sizing, resource tagging and governance, and using Azure Cost Management to track, forecast, and reduce spend.
• Experience with Azure DevOps in a Scrum or Agile environment.
• Solid understanding across cloud and infrastructure components — servers, virtualization, storage, network, data, and applications — to deliver true end-to-end designs.
• Solid understanding of operating systems and networking. Experience in Window and Linux OS.

How you work

• Excellent written and verbal communication skills.
• A strong problem-solver — you analyze issues clearly, communicate well with colleagues, and drive to quick, sound conclusions.
• Adaptable and curious — comfortable picking up new technologies quickly.