Solutions Architect

Company Overview: Atreides helps organisations turn large, complex, multimodal datasets into detailed geospatial data, that can be used for a wide range of use cases. At present, Atreides focuses on providing high-fidelity data that allows customers to make decisions quickly.

We are a fast-moving, high-performing start-up. We value having a diverse team and believe that inclusion helps us perform better. We trust our people to work independently, as we believe this leads to better results and greater job satisfaction. With a mission-driven mindset and an entrepreneurial spirit, we are building something new and helping to harness data on a massive scale to make the world safer, stronger and more prosperous.

Team Overview: Our teams are made up of engineers and technologists that solve hard problems. Between us, we have decades of experience in defence, operational intelligence, law enforcement, hyperscalers, big data processors and cyber security operations. We obsess about designing products that will change the way governments, international companies and non-profit organisations protect themselves from external threats and hostile adversaries

Position Overview: We are seeking an experienced Solutions Architect to support the design and delivery of secure, scalable and resilient Microsoft Azure environments that support critical defence platforms. You will work with colleagues and stakeholders from a range of disciplines, based around the world, to shape mission-focused cloud strategies that meet strict security and performance requirements.

Responsibilities

• Design, build and maintain Azure Mission Environments using Infrastructure as Code (Terraform and/or Bicep), aligned to the Cloud Adoption Framework and customer security requirements.

• Design secure, performant solutions to integrate sensors and data with Mission Environments that scale, have resilience and cost efficiency.

• Engineer and operate Azure networking, including:

  i. Hub-and-spoke and Virtual WAN topologies, VNet peering and route tables (UDRs) and vWAN

  ii. Azure Firewall, NSGs, Application Gateway / WAF and Front Door

  iii. Private Endpoints, Private Link and Private DNS zone design

  iv. Hybrid connectivity: site-to-site VPN, ExpressRoute and BGP routing

• Design, configure and manage Cloudflare services, including:

  i. DNS management and zone configuration

  ii.Firewall rules, rate limiting, bot management and DDoS protection

  iii. Cloudflare Zero Trust / Access, Tunnels and secure application publishing

  iv. Certificate and TLS configuration, caching and performance tuning

  v. Managing Cloudflare configuration as code

• Build and maintain CI/CD pipelines for infrastructure, software solutions and platform deployments, including plan/apply workflows, approvals, testing and drift detection.

• Implement and enforce governance through Azure Policy, management group hierarchy, RBAC, Privileged Identity Management and tagging and cost standards.

• Implement platform security controls, including Microsoft Defender for Cloud, Key Vault, managed identities, diagnostic logging and Microsoft Sentinel integration.

• Build observability with Azure Monitor, Log Analytics, Grafana and alerting, ensuring platforms are supportable and evidence is available for assurance.

• Act as a Level 2/3 escalation point for complex platform, networking and connectivity issues, leading root cause analysis and permanent fixes.

• Act as a point of contact for downstream data consumers of the platforms.

• Lead integration of emerging capabilities - such as mobile platforms and zero-trust architectures - into legacy or hybrid estates.

• Collaboratively work with wider Atreides Engineering teams on product updates and feedback.

• Drive operational excellence through monitoring, capacity planning and cost control across cloud workloads.

• Collaborate with Defence partners, third-party vendors and internal teams to ensure solutions meet programme requirements and security mandates.

• Maintain architecture standards, patterns and run-books to support audit readiness, compliance and onboarding.

Required Qualifications:

• Deep expertise in Azure architecture, infrastructure and engineering, including landing zone design and Azure Policy
• A strong grounding in networking (VPNs, firewalls, routing, switching and ExpressRoute) and in security-by-design principles
• Strong infrastructure-as-code experience with Terraform and/or Bicep, including writing reusable modules, managing state and promoting changes safely across environments
• Excellent communication skills, with the ability to explain complex technical concepts clearly to both engineers and non-technical stakeholders
• Experience supporting defence, intelligence or government clients, ideally in secure or classified environments
• A Microsoft Azure certification, such as AZ-104 (Azure Administrator Associate) or AZ-305 (Azure Solutions Architect Expert), or equivalent hands-on experience

Eligibility Requirements

• Right to work in Denmark: because of defence sector restrictions, candidates must be EU/EEA nationals or already hold a Danish work permit
• Security clearance: you must be eligible for Danish SECRET clearance. Atreides will sponsor the vetting process for the successful candidate.

Nice to Have

• Azure certifications: AZ-400 (Azure DevOps Engineer Expert), AZ-500 (Azure Security Engineer Associate) or AZ-700 (Azure Network Engineer Associate)
• Experience using Python for infrastructure automation
• CCNA or an equivalent networking qualification
• Working proficiency in Danish