- Lead the design and implementation of enterprise cloud architecture solutions across Microsoft Azure, Microsoft 365, and hybrid cloud environments for client organisations
- Architect secure cloud infrastructure including identity and access management (IAM), network security, data protection, and compliance frameworks aligned with industry standards (ISO 27001, SOC 2, NIST)
- Conduct technical assessments and design reviews to ensure client environments meet security, performance, and scalability requirements
- Develop and document cloud architecture standards, reference architectures, and technical runbooks for service delivery teams
- Lead technical pre-sales activities including solution design, proposal development, and client presentations for complex cloud and security engagements
- Oversee technical delivery of Microsoft Intune deployments, endpoint security configurations, and enterprise mobility solutions
- Ensure alignment with Microsoft partner programme requirements and maintain technical certifications for partnership compliance
- Define and execute Blue Island's technology roadmap, ensuring service offerings remain competitive and aligned with market demands
- Evaluate emerging technologies including AI/ML security tools, cloud-native security platforms, and automation capabilities for integration into service offerings
- Establish and manage strategic technology partnerships with vendors including Microsoft, Datadog, and security tooling providers
- Provide technical governance and quality assurance across all client engagements
- Mentor and develop technical capabilities within the delivery team as the company scales
Technical Skills & Competencies:
Cloud Architecture and Infrastructure
- Microsoft Azure architecture: Virtual networks, Azure AD/Entra ID, Azure Security Center, Microsoft Sentinel, Azure Kubernetes Service (AKS), Azure DevOps
- Microsoft 365 enterprise deployment: Exchange Online, SharePoint, Teams, OneDrive, Microsoft Defender suite
- Hybrid cloud integration: Azure Arc, on-premises Active Directory synchronisation, hybrid identity management
- Infrastructure as Code: ARM templates, Terraform, PowerShell automation, Azure CLI scripting
Cybersecurity and Compliance
- Microsoft Intune and endpoint security: Device compliance policies, application protection, conditional access, security baselines
- Identity and access management: Entra ID Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Zero Trust architecture implementation
- Security monitoring and incident response: Microsoft Sentinel SIEM, Datadog monitoring, log analytics, threat detection
- Compliance framework implementation: ISO 27001, SOC 2, NIST Cybersecurity Framework, Essential Eight (Australia), CSA Singapore cybersecurity requirements
Enterprise Architecture and Strategy
- Enterprise architecture methodologies: TOGAF principles, solution architecture documentation, technical design authority
- Digital transformation: Legacy system modernisation, cloud migration strategies, modern workplace enablement
- Vendor and partner management: Microsoft Partner programme engagement, technology vendor evaluation, third-party integration
