Solution Architect - South Bank, QLD

12 Month contract opportunity

At Flight Centre Travel Group (FCTG) our purpose is to 'open up the world for those who want to see'. Every day, we give people all around the world the opportunity to experience something really amazing – travel! 

As a Cloud Infrastructure Solution Architect, you will be a dedicated specialist within our Enterprise Technology Services (ETS) team. Your mission is to bridge the gap between high-level domain architecture and technical engineering, ensuring our cloud foundations are secure, scalable, and interconnected.

You will operate across two critical dimensions: externally, designing the complex "wiring" between global tenants, systems, and cloud services; and internally, collaborating with Domain Solution Architects to own and refine the infrastructure components of every solution design. You will act as the primary conduit between the architecture practice and our engineering delivery teams, translating logical designs into robust, deployable technical specifications.

If you are a deep Azure specialist who enjoys the challenge of cross-tenant networking, identity governance, and security-by-design, we encourage you to apply.

• Design Cross-Tenant Connectivity: Lead the architectural design for networking between global tenants (including UK, EU, and partner networks), managing hub-spoke topologies, VNet peering, and private endpoints

• Translate Architecture to Engineering: Work alongside Domain SAs to own the infrastructure layer of solution designs. You will translate logical architectures into engineer-ready specs, including topology diagrams, deployment architectures, and NFRs

• Architect Identity & Access: Design "identity-in-from-the-start" solutions using Entra ID (formerly Azure AD), managed identities, RBAC, and conditional access policies

• Security-by-Design: Apply Zero Trust principles and threat modelling at the infrastructure layer, ensuring all designs align with security policies while enabling rapid delivery

• Govern Environment Patterns: Define and maintain standard Azure environment patterns, landing zone templates, and resource tagging conventions to ensure engineering consistency

• Legacy Infrastructure Assessment: Evaluate the infrastructure dependencies of critical legacy systems, identifying risks and defining technical requirements for modernisation or migration

• Delivery Shepherding & Scoping: Act as a technical conduit for delivery partners, pre-consulting on infrastructure tickets to ensure they are correctly scoped and reducing rework

• Practice Integration: Participate in Design Authority and review gates, ensuring infrastructure design input is captured before build commences

• Cost & Operational Optimisation: Design for supportability and efficiency, assessing the run-cost implications of Azure service choices (e.g., Service Bus vs Event Grid) and infrastructure sizing

• 7-10 years in IT architecture, with a heavy focus on cloud infrastructure, networking, and security implementation

• Deep Azure Expertise: Expert-level knowledge of Azure network design (hub-spoke, DNS resolution, ingress/egress patterns) and platform services (Functions, Container Apps, Cosmos DB)

• Identity Mastery: Proven experience with Entra ID, service principal governance, and Key Vault patterns in a complex enterprise environment

• Technical Translation Skills: The ability to take a high-level business solution and produce detailed infrastructure diagrams and specifications that engineers can act on without ambiguity

• Security Mindset: Practical experience with Tenable or similar vulnerability management tools, and a strong understanding of encryption and infrastructure-level security controls

• Hybrid & Cross-Tenant Experience: Specific experience managing connectivity and identity across multiple distinct cloud tenants and legacy on-premise environments

• Collaborative Influence: Experience working within an embedded architecture practice, influencing both application architects and engineering leads

• Infrastructure as Code (IaC): Familiarity with Terraform, Bicep, or ARM templates to support automated, repeatable patterns

• Education & Certification: Bachelor’s degree in Computer Science or IT. Relevant certifications (e.g., Azure Solutions Architect Expert, AZ-700 Network Engineer, or TOGAF) are highly regarded

• Azure Network Design & Hybrid Connectivity

• Identity & Access Management (IDAM) Architecture

• Security-by-Design & Threat Modelling

• Infrastructure Specification & Diagramming

• Cloud Cost Management & Supportability Design

What you'll Enjoy:

Back to search results Apply now Refer a friend