[Hiring] Solution Architect @Softeq

Role Description

What the role does here:

• Reviews the current cloud environments: subscriptions, resource groups, networking, access and security models, workspace structure, compute patterns, storage, deployment, monitoring and cost controls;
• Produces reasoned recommendations on the platform path: modify the existing environments, build new ones, or take a phased hybrid approach, with risks, dependencies and cost considerations;
• Decides the number and purpose of workspaces and the catalog structure: where the line runs between environments, where between data domains, and how that interacts with permissions and cost;
• Designs the target data architecture: raw, cleaned, curated and serving layers, a feature layer for models, ingestion, transformation, orchestration, semantic layer, reporting support;
• Defines naming, ownership, classification and lineage conventions, and the rules for granting access;
• Designs the data security model: managed versus external tables, external locations and storage credentials, row filters and column masks, and a separate scope for external consumption;
• Defines the platform network model: deployment into a customer-managed virtual network, private access to storage and to the control plane, and removal of public exposure;
• Builds the compute and cost model: cluster and warehouse types, policies, tags, spend forecasting and a chargeback mechanism;
• Designs the production landing zone for the external application: an isolated subscription, virtual network, private endpoints, a separate tenant for external users, and dedicated container registry and secrets store;
• Owns application and integration architecture: service layer, data consumption, external authentication, perimeter protection, observability;
• Produces decision records, diagrams and a traceability matrix from requirements to deliverables; leads architecture reviews.

Qualifications

• Databricks at platform rather than user level: the account and workspace split, metastores and catalogs, workspace strategy, environment isolation, and running the permission model in practice;
• Unity Catalog end to end: managed and external tables, external locations, row and column protection, lineage, system tables, and sharing data with external consumers;
• The platform compute and consumption model: cluster and warehouse types, serverless options, policies, pools, tagging, spend analysis and forecasting;
• Platform network isolation: customer-managed networking, private endpoints, removal of public access, storage-level restrictions, audit logging;
• Medallion architecture and semantic layer design for application and reporting consumption;
• Ingestion approaches and how to choose between them: incremental file ingestion, streaming and declarative pipelines, change data handling, federated access without copying;
• Delivery and environment promotion: portable project bundles, source control integration, catalog parameterization, automated tests;
• Azure at design depth: App Service, Front Door and WAF, Key Vault, Container Registry, App Insights, Log Analytics, Entra ID;
• Infrastructure as code, preferably Bicep;
• External identity design: registration and invitation, MFA and conditional access, organization association, role-based access, account lifecycle, audit logging;
• A real practice of architecture review and written argument for decisions.

Requirements

• Migrating or consolidating multiple workspaces and metastores;
• Rolling out Unity Catalog on an already running platform rather than greenfield;
• External customer portals with a separate tenant for external users;
• Change data capture and Oracle experience;
• Platform cost modeling and cloud spend optimization;
• Working alongside a client-side architect in an advisory capacity.

Benefits

• Softeq communicates only from @softeq.com email addresses.
• We never request payments or fees for any reason during hiring — including trainings or courses to be completed, equipment, onboarding, or background checks — and we will not ask for banking information, cryptocurrency or gift cards.
• If you receive a message from any other domain or requesting payment, do not respond and report it to [email protected].