Infrastructure Architect

What you’ll be doing

Atturra are designing a new Request Management System (RMS) for a Commonwealth client, including an Archiving Service for retained Requests. The system will be hosted in a secure Microsoft Azure environment in Australian regions and must meet the security, performance, scalability and business continuity requirements set out in the Statement of Work.

We are seeking a highly skilled Infrastructure Architect who will own the platform side of the design. They develop and document the Azure reference architecture, the network topology and the cyber security controls that underpin the RMS, and shepherd that design through internal review and client approval. They work alongside the Application Architect, who is responsible for the application and Carrier integrations layered on top of the platform.

This is a high-visibility role with a long runway. The first body of work is the Design Phase — presenting in collaborative design workshops with the client, agency stakeholders and Carrier representatives, and producing the Approved Detailed Design that the Build and Implement Phase is priced and delivered against. From there, the Infrastructure Architect carries the design through Build, Implement and into ongoing platform ownership of the RMS.

Based in Canberra, it’s also a non-negotiable requirement to have an active AGSVA NV1 Security Clerance for the successful candidate.

Responsibilities:

Reporting to the Project Manager and working alongside the Application Architect, the Infrastructure Architect will contribute the infrastructure components of the following Design Phase deliverables:

• Implementation Plan input — the infrastructure scope, dependencies and resourcing inputs that feed the overall Implementation Plan
• Draft Detailed Design — the platform architecture, network topology, identity model, security controls and hosting design for the RMS and Archiving Service
• Final Detailed Design — the accepted version incorporating client feedback and workshop outcomes
• Backup & Business Continuity Plan — the infrastructure inputs covering backup and recovery procedures, required recovery times per RMS subsystem, post-restoration verification procedures, geo-redundancy and continuity scenarios
• Design workshop outputs — facilitation and documentation of infrastructure-focused design workshops with the client, agencies and Carriers, with outcomes folded into the Final Detailed Design as an addendum
• RACI contribution — the infrastructure entries within the project RACI for build, implement and ongoing operations
• Weekly reporting input — inputs to the weekly Tuesday Project Status Report covering progress, risks, issues and dependencies on the infrastructure stream.

Once the Final Detailed Design is accepted, the Infrastructure Architect transitions into the Build and Implement Phase and the longer-term platform role:

• Owning the design through build — guarding design integrity, approving deviations and updating the detailed design as engineering uncovers real-world constraints
• Leading the implementation of the Azure platform alongside engineering teams and Microsoft partners
• Supporting cutover, go-live and the early life of the system in production
• Holding the architecture authority for the RMS platform on an ongoing basis — design changes, new Carrier integrations, platform uplift, and feeding the technology roadmap
• Mentoring engineering staff and contributing to the broader architecture practice.

Design scope

• Azure foundation — subscription and landing zone design, resource organisation, Azure Policy and Blueprints aligned to Australian Government ISM controls
• Multitenancy, hosting and accreditations — the multitenancy architecture, hosting locations within Australian regions, and the compliance accreditations the platform inherits or attests to
• Network design — Hub-Spoke topology, segmentation, private connectivity to PaaS via Private Link / Private Endpoints, DNS, egress controls, and the network requirements connecting the RMS to Agencies and to Carriers (per Annexure E), with the encryption standards applied on each connection
• Identity and access — Microsoft Entra ID, Conditional Access, Privileged Identity Management, two-factor authentication across all environments (per SoW clause 2.5), and the administrator roles, permissions and responsibilities for managing the platform
• Security controls — supported authentication and authorisation methods, hardware and software assurance and validation, threat and vulnerability management (Microsoft Defender for Cloud and supporting processes), and protection of data at rest and in transit (Key Vault HSM-backed keys, encryption, classification)
• Monitoring and auditing — Microsoft Sentinel for SIEM/SOAR, the logging and retention model, and the auditing capability used to evidence access, change and security events
• Application hosting platform — the compute, database, storage, caching and container services that host the RMS application designed by the Application Architect, including the platform contract that microservices and integrations build on
• Archiving Service — the storage, search and retrieval platform that holds Requests after purge from the RMS, including data sovereignty, retention and access controls
• Scalability and resilience — how the platform scales under load and how it remains available — including zone redundancy, failover paths and the architectural patterns underpinning RMS resilience
• Backup, restore and continuity — platform-level backup and recovery design, per-subsystem recovery times that feed the Backup and Business Continuity Plan, and the procedures and criteria for verifying correct operation after restoration
• Environments — consistent design across all RMS environments, with two-factor authentication and security controls applied uniformly.

Working Conditions:

• On-site
• Canberra 
• Permanent /Contract
• Active AGSVA NV1 Security Clearance

What will make you successful in this role?

Technical Requirements

Must-have:

• Demonstrated experience as an Infrastructure or Cloud Architect designing Microsoft Azure environments in Australian regions for regulated or government workloads
• Strong working knowledge of the Australian Government Information Security Manual (ISM) and the Essential Eight, and experience designing to those controls
• Hands-on design experience across the Azure stack — landing zones, networking (Hub-Spoke, Private Link, Azure Firewall, WAF), Entra ID with Conditional Access and PIM, Key Vault, Microsoft Sentinel, Defender for Cloud, Azure Policy, Azure Backup
• Network design skills covering segmentation, private connectivity, TLS, and zero-trust principles applied to cloud workloads
• Demonstrated ability to produce architecture documentation that meets a high-quality detailed-design standard suitable for client approval and contractual acceptance
• Experience integrating cloud platforms with third-party providers or carriers, including secure API and data exchange patterns
• Confident facilitator who can run collaborative design workshops with mixed audiences (client executives, agency users, carrier engineers) and convert outcomes into design decisions
• Comfortable working to a contracted milestone schedule
• Australian citizenship and holding a current NV1 security clearance.

Desirable:

• Prior experience preparing for or supporting an IRAP assessment
• Experience with Microsoft 365 in Australian regions in a government or regulated context
• Infrastructure-as-Code experience with Bicep, Terraform or Azure Verified Modules / Azure Landing Zone accelerator
• Microsoft certifications — SC-100 (Cybersecurity Architect Expert), AZ-305 (Solutions Architect Expert), AZ-500 (Security Engineer)
• Background in telecommunications or carrier-integration projects.

How you will work:

• You report to the Project Manager during Design and through Build & Implement, then transition into the permanent platform architecture function under the Head of Architecture
• You work as an equal partner with the Application Architect — your design defines the platform contract; theirs defines the application that runs on it
• The first 10 weeks are milestone-driven, with weekly reporting and weekly client meetings Outputs are written deliverables submitted in Microsoft Word and Excel; expect time in design workshops, internal review forums and client approval sessions
• Hybrid working with on-site presence for design workshops, client engagements and secure-handling activities as required.

Why this role:

• Permanent ownership of a greenfield Azure platform for a government-facing system — you design it, you build it, you run it
• Career runway. The Design Phase opens the role; Build, Implement and ongoing platform ownership give you years of work on a system you authored
• Real authority. This is not a documentation role on someone else’s design. You are the named architecture owner for the RMS platform
• Visibility with senior client and agency stakeholders through the workshop programme, and a seat in our architecture practice
• Working with an experienced delivery team — Project Manager, Application Architect, security and engineering specialists.

Why is this an exciting opportunity?

Atturra is one of the fastest growing ASX-listed advisory and IT solutions companies in Australia, giving you a strong foundation to fulfil your career ambitions.

We currently have 1100+ professionals working across Australia, New Zealand, Singapore and Hong Kong who are using innovation to lead the way.

This is your chance to make an impact. Come and join our talented and creative team of change makers to redefine the future through technology.

Our Cloud Business Solutions team specialises in strategy, migration, and proactive management across large enterprise and small-scale cloud deployments. We use a tailored approach to build scalable cloud solutions that modernise IT environments, enhance productivity, and ensure business continuity.

What our people say:

“We are working towards a very bright future.”

“It's a company with vision and a promising future.”

Why you’ll love working here

Culture of possibility

At Atturra we embrace innovation within our teams, fostering an environment of possibility and growth. We believe in creating a supportive and welcoming culture, where everyone is encouraged to achieve success through collaboration, continuous learning, and smart work practices.

A strong set of company values

Our culture is reflected by our employees who demonstrate camaraderie, innovation, dedication, respect and excellence in everything they do. These traits have become integral to the way we do business and are the values we strive for.

Valuable employee benefits

• Employee benefits, recognition, and wellbeing platform
• Career growth via succession planning, internal promotions, and mentorship opportunities
• Ongoing investment in professional development through industry and technology certifications, and study assistance
• Mental health support through our Employee Assistance Program
• Support for family and caring responsibilities, including paid parental leave
• Employee referral program, with monetary incentives offered 

Commitment to supporting Australia’s veterans 

Atturra is proud to be recognised as a Veteran Friendly Employer by the Department of Veterans Affairs’ Veteran Employment Commitment (VEC) and is committed to supporting Australia’s veteran community. We aim to enhance the employment experience for veterans by improving recruitment, support, retention, and leadership opportunities to ensure they have a meaningful and impactful career with us.

What our people say:

“Atturra has a great working environment and management are very supportive of their staff. We celebrate success and have fun while working hard.”

How to apply

Careers | Atturra

https://atturra.com/au-en/careers

Recruitment Agencies/Headhunters:

We got this covered. Our Talent Acquisition team is working on our hiring demands and will reach out should we need extra support. Atturra only accepts referrals from agencies on our official supplier list via Agency Portal. Agencies are required to go through our procurement process, have an approved fee agreement, and be invited to participate in hiring for a job opening by the Atturra Talent Acquisition team. Any profiles or referrals submitted outside of this process will be deemed invalid. We request that you do not contact Atturra employees outside of the Talent Acquisition team for any hiring-related queries. To become an official supplier, send an expression of interest via talentacquisition@atturra.com.  

Atturra is committed to addressing the digital skills gap and advocating for diversity and inclusion. We encourage applications from all individuals, regardless of Veteran or service status, gender, LGBTQI+ identity, ethnicity, religion, physical ability, or age.

This document is intended to describe the general nature and level of work being performed by people assigned to this job. It is not intended to be a comprehensive list of all responsibilities, key accountabilities, and skills of persons so classified.  Management reserves the right to add or change the job and relevant percentage of accountabilities as required, in its sole discretion.