Established in 1997, Softeq was built from the ground up to specialize in new product development and R&D, tackling the most difficult problems in the tech sphere. Now we've expanded to offer early-stage innovation and ideation plus digital transformation business consulting. Our superpower is to deliver all of this under one roof on a global scale. So let's get started and build a better future together!
What the role does here:
- Reviews the current cloud environments: subscriptions, resource groups, networking, access and security models, workspace structure, compute patterns, storage, deployment, monitoring and cost controls;
- Produces reasoned recommendations on the platform path: modify the existing environments, build new ones, or take a phased hybrid approach, with risks, dependencies and cost considerations;
- Decides the number and purpose of workspaces and the catalog structure: where the line runs between environments, where between data domains, and how that interacts with permissions and cost;
- Designs the target data architecture: raw, cleaned, curated and serving layers, a feature layer for models, ingestion, transformation, orchestration, semantic layer, reporting support;
- Defines naming, ownership, classification and lineage conventions, and the rules for granting access;
- Designs the data security model: managed versus external tables, external locations and storage credentials, row filters and column masks, and a separate scope for external consumption;
- Defines the platform network model: deployment into a customer-managed virtual network, private access to storage and to the control plane, and removal of public exposure;
- Builds the compute and cost model: cluster and warehouse types, policies, tags, spend forecasting and a chargeback mechanism;
- Designs the production landing zone for the external application: an isolated subscription, virtual network, private endpoints, a separate tenant for external users, and dedicated container registry and secrets store;
- Owns application and integration architecture: service layer, data consumption, external authentication, perimeter protection, observability;
- Produces decision records, diagrams and a traceability matrix from requirements to deliverables; leads architecture reviews.
Must have:
- Databricks at platform rather than user level: the account and workspace split, metastores and catalogs, workspace strategy, environment isolation, and running the permission model in practice;
- Unity Catalog end to end: managed and external tables, external locations, row and column protection, lineage, system tables, and sharing data with external consumers;
- The platform compute and consumption model: cluster and warehouse types, serverless options, policies, pools, tagging, spend analysis and forecasting.
- Platform network isolation: customer-managed networking, private endpoints, removal of public access, storage-level restrictions, audit logging;
- Medallion architecture and semantic layer design for application and reporting consumption;
- Ingestion approaches and how to choose between them: incremental file ingestion, streaming and declarative pipelines, change data handling, federated access without copying;
- Delivery and environment promotion: portable project bundles, source control integration, catalog parameterization, automated tests;
- Azure at design depth: App Service, Front Door and WAF, Key Vault, Container Registry, App Insights, Log Analytics, Entra ID;
- Infrastructure as code, preferably Bicep;
- External identity design: registration and invitation, MFA and conditional access, organization association, role-based access, account lifecycle, audit logging;
- A real practice of architecture review and written argument for decisions.
Nice to have:
- Migrating or consolidating multiple workspaces and metastores;
- Rolling out Unity Catalog on an already running platform rather than greenfield;
- External customer portals with a separate tenant for external users;
- Change data capture and Oracle experience;
- Platform cost modeling and cloud spend optimization;
- Working alongside a client-side architect in an advisory capacity.
Softeq communicates only from @softeq.com email addresses. We never request payments or fees for any reason during hiring — including trainings or courses to be completed, equipment, onboarding, or background checks — and we will not ask for banking information, cryptocurrency or gift cards. If you receive a message from any other domain or requesting payment, do not respond and report it to [email protected]
