Portfolio BI
Portfolio BI
Portfolio BI provides data solutions and technology services for alternative asset managers, including hedge funds, private credit firms, and institutional investment organizations. Its platform portfolio includes PBI Axiom, an investment book of records; PBI Vector, an enterprise data management solution; and PBI Stratus, a managed security service. The company focuses on automating and streamlining investment operations, with capabilities that include order management, scalable data infrastructure, and financial-sector expertise. Portfolio BI’s work is centered on helping clients improve operational efficiency while supporting complex, growing investment businesses.

Senior Azure and Microsoft 365 Technical Architect

Lead secure Azure and Microsoft 365 cloud platforms for Portfolio BI’s alternative asset management products. Strengthen identity, disaster recovery, monitoring, automation and provider oversight.

Description

  • Oversee Azure subscriptions, landing zones, networking, compute, databases and Microsoft 365 tenant settings, including links between current and legacy platforms.
  • Check deployed infrastructure against architecture and security requirements, including ingress, DNS, certificates and access controls.
  • Review Entra ID, Conditional Access, authentication, RBAC, PIM, emergency access, service identities, guest and B2B access, and client-facing identities.
  • Maintain least-privilege access, joiner/mover/leaver processes and regular access reviews, and remove orphaned identities.
  • Reconcile permissions and access dependencies across Microsoft 365, Azure, Azure DevOps and applications.
  • Manage Key Vault, secrets, certificates and their rotation.
  • Evaluate and strengthen disaster recovery, covering recovery units, shared dependencies, RTOs/RPOs, backups, database replication, point-in-time recovery and multi-region design.
  • Lead restore and failover exercises from invocation through validation and return to primary, keeping runbooks, assigned responsibilities and test evidence up to date.
  • Strengthen service-health monitoring with Azure Monitor, Log Analytics, KQL and Application Insights.
  • Connect services to monitoring signals, make alerts actionable with clear routing and ownership, and separate customer-facing status from operational diagnostics.
  • Investigate production incidents across infrastructure, applications, APIs and integrations.
  • Keep practical runbooks and technical documentation current.
  • Manage Terraform configurations, modules and state; identify configuration drift; support Azure DevOps pipelines and permissions; and build PowerShell scripts and automation.
  • Enforce Azure Policy and landing-zone guardrails, maintain tagging, naming and subscription standards, and improve cost management.
  • Serve as the internal technical contact for external providers, scrutinize proposed changes, and explain gaps, risks and recommendations to technical and non-technical stakeholders.

Requirements

  • Hands-on expertise in Microsoft Azure and Microsoft 365, including Azure platform engineering, tenant administration and security, Active Directory servers, and Mimecast email security and spam filtering.
  • Background across cloud architecture, engineering and operations in business-critical production settings.
  • Experience with financial-services cloud environments, cloud cost optimisation and FinOps.
  • Strong command of Entra ID, Conditional Access, Azure RBAC, PIM, Key Vault and identity and access governance across connected platforms.
  • Working knowledge of Azure networking, ingress, compute and databases, including backup, replication and restoration.
  • Experience evaluating and validating disaster recovery, including dependency mapping, RTOs/RPOs, recovery procedures, restore testing and regional failover.
  • Experience with Azure Monitor, Log Analytics, KQL and Application Insights for service-health monitoring, alert tuning and troubleshooting distributed, API-driven services.
  • Practical Terraform skills in modules, state management and drift detection, plus Azure DevOps CI/CD, access controls, PowerShell scripting and Azure Policy.
  • Strong technical writing and runbook skills, including the ability to distinguish verified findings from assumptions and recommendations.
  • Able to work independently, use sound technical judgement, collaborate with and challenge external providers, and communicate clearly with technical and non-technical stakeholders.
  • Familiarity with Bicep or ARM templates.
  • Experience supporting security audits.
  • Familiarity with AI tools and their practical uses in Microsoft 365 or IT operations.
  • Experience working with multiple external technology suppliers.

Benefits

  • Hybrid work with flexibility to split time between the office and remote work.
  • Hands-on technical projects using modern technologies and contributing to meaningful improvements.
  • Compensation described as competitive and aligned with skills and experience.
  • Medical insurance coverage.
  • Generous paid leave.
  • Training opportunities for career development.
  • Company-funded professional certification exams.
  • Bonuses.

Related Jobs

Kreato Global | BPO and Language Solutions

Remote English-Spanish OPI/VRI Interpreter

Kreato Global | BPO and Language Solutions
201 – 500 Employees
HealthcareHospitalityLogistics

Interpret remotely between English- and Spanish-speaking people in medical, financial, social service, and customer care settings. Provide language support for Kreato Global across Latin America.

Open