- Leading company in its field
- Based in Melbourne (hybrid work environment)
- 6 Months initial assignment with extension

Green Light Australia are partnering with a leading company to engage Infrastructure Architect – Cloud & IDAM to drive a major technology transformation program for a large enterprise environment.

Lead the architecture and strategic evolution of Microsoft cloud, identity and hybrid infrastructure across the client group. Translate business and operational requirements into secure, resilient, scalable and cost-effective technology platforms that support corporate, retail and refinery environments. Define target-state architectures, standards and multi-year roadmaps, and provide design governance from concept through implementation and operational handover. The role is accountable for the quality and integrity of infrastructure and identity designs, their alignment with enterprise strategy and standards, and the evidence used to assess security, availability, recoverability, performance, supportability and whole-of-life cost

Responsibilities

- Substantial enterprise infrastructure experience, including demonstrated architecture accountability for Azure, Microsoft identity and hybrid infrastructure environments. Equivalent depth of experience will be considered.
- Proven delivery of Azure landing zones, cloud governance, hybrid identity integration, migrations and resilient infrastructure solutions within complex, multi-site organisations.
- Strong practical knowledge of Windows Server, Active Directory Domain Services, Microsoft Entra ID, Entra Connect or Cloud Sync, and Microsoft 365 infrastructure dependencies.
- Demonstrated ability to design across identity, networking, compute, storage, backup, disaster recovery,



cyber security, monitoring and service management domains.
- Experience with infrastructure as code, PowerShell, version control and deployment pipelines, with the ability to review technical implementations and guide engineering teams.
- Strong architecture documentation, options analysis, stakeholder engagement, governance and supplier-management capability, including consideration of licensing, cost and operational trade-offs.

Requirements

- Experience in energy, retail, industrial or other environments requiring continuous operations, including awareness of IT/OT separation, operational resilience and controlled change.
- Experience with acquisition integration, tenant or domain consolidation, data-centre transformation and transition between managed service providers.
- A degree in information technology, engineering or a related discipline, or equivalent skilled experience. Relevant Microsoft Azure, identity, architecture or security certifications are desirable.
- Familiarity with enterprise architecture frameworks, IT service management, cloud financial management, Microsoft licensing and technology lifecycle planning.
- Ability to design secure, scalable, resilient and highly available cloud and hybrid solutions across Microsoft Azure and enterprise infrastructure environments.
- Deep knowledge of identity architecture,



including Microsoft Entra ID, Active Directory, hybrid identity, authentication, authorisation, single sign-on, federation, MFA, Conditional Access and identity lifecycle management.
- Ability to apply Zero Trust principles across identity, device, application, network and privileged-access controls, with a strong focus on least privilege and continuous verification.
- Strong understanding of privileged identity and access management, administrative tiering, just-in-time access, role-based access control, service accounts, workload identities and privileged-access governance.
- Practical knowledge of Entra ID, Active Directory Domain Services, Entra Connect or Cloud Sync, Windows Hello for Business, B2B collaboration, application registrations and enterprise applications.
- Ability to architect end-to-end solutions spanning cloud, data centres, end-user computing, network and security platforms, SaaS services and operational technology boundaries.
- Strong understanding of modern identity protocols and technologies, including OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP and certificate-based authentication.
- Ability to define approved authentication and authorisation patterns for SaaS, cloud-native, legacy and on-premises applications.
- Ability to establish non-functional and operational requirements covering observability, logging, alerting, availability, backup, disaster recovery, support and service transition.
- Ability to assess designs against enterprise standards, cyber security requirements, technology strategy, risk appetite, architecture principles and lifecycle obligations.
- Highly developed written and verbal comm

📌 Infrastructure Architect (Melbourne)
🏢 Green Light Worldwide
📍 Melbourne