Trapeze Group is a leading provider of innovative software solutions for the transportation industry, delivering mission-critical technology that powers public transit agencies, government organizations, and private operators worldwide. For over 25 years, our solutions have enhanced mobility, improved efficiency, and ensured operational excellence for transportation networks across the globe. With over 500 customers in more than 45 countries, Trapeze Group is trusted to deliver reliable technology that moves millions of people every day.
At Trapeze Group, we foster a culture of innovation, collaboration, and continuous learning, enabling our employees to thrive in a dynamic and forward-thinking environment. As part of the Modaxo and Constellation Software family, we offer the stability of a global organization combined with the agility of a technology innovator.
The IT Infrastructure Architect is responsible for designing, implementing, and optimizing Trapeze Group's IT infrastructure across both on-premises and cloud environments, with a strong focus on Cisco appliances and Microsoft Azure. This strategic role ensures that all systems are scalable, secure, and high-performing while aligning with business objectives and cybersecurity requirements. The successful candidate will serve as a technical authority on infrastructure architecture, providing expert guidance on network design, security frameworks, performance monitoring, and disaster recovery strategies.
Key Responsibilities
Infrastructure Design & Implementation
- Architect, deploy, and manage secure, scalable, and high-availability IT infrastructure solutions that support business continuity and growth objectives.
- Develop and maintain comprehensive IT infrastructure roadmaps aligned with enterprise goals, technology trends, and security best practices.
- Lead cloud migration initiatives and design hybrid infrastructure solutions primarily using Microsoft Azure.
- Create and maintain detailed technical documentation, network diagrams, and system architecture blueprints using industry-standard methodologies.
- Establish infrastructure standards, patterns, and governance frameworks to ensure consistency across environments.
Performance, Security & Cyber Risk Management
- Implement robust monitoring systems to track infrastructure performance metrics and proactively identify potential issues.
- Design and implement multi-layered security architecture following zero-trust principles and defense-in-depth strategies.
- Conduct infrastructure risk assessments and vulnerability management programs to identify and remediate security gaps.
- Deploy and maintain advanced security tools, including SIEM, endpoint detection and response, and cloud security posture management.
- Ensure compliance with relevant industry standards and regulations (ISO 27001, SOC 2, NIST).
- Develop and implement security policies, procedures, and controls to protect critical information assets.
- Design comprehensive data protection protocols, including encryption, masking, and tokenization for sensitive information.
Disaster Recovery & Business Continuity
- Design and implement comprehensive disaster recovery and business continuity solutions for critical systems.
- Establish recovery time objectives (RTO) and recovery point objectives (RPO) in collaboration with business stakeholders.
- Conduct regular DR testing and audits to validate recovery procedures and ensure minimal downtime.
- Implement automated backup solutions with appropriate retention policies for both on-premises and cloud environments.
- Create incident response playbooks for various infrastructure and security scenarios.
Technology Innovation & Cost Optimization
- Research and evaluate emerging technologies to improve efficiency, enhance security posture, and drive business value.
- Implement cloud cost optimization strategies, including resource right-sizing, reserved instances, and automated scaling.
- Develop FinOps practices for cloud resources to maintain an optimal balance between performance and cost.
- Lead infrastructure modernization initiatives to replace legacy systems with more efficient solutions.
- Provide thought leadership on infrastructure innovation and digital transformation opportunities.
Technical Expertise Required
- Extensive experience with Microsoft Azure services, including Azure Virtual Networks, Azure Security Center, Azure Backup, and Azure Site Recovery.
- Strong Microsoft 365 and Azure administration skills, including tenant management, Exchange Online, SharePoint Online, and Microsoft Entra ID.
- In-depth knowledge of data protection protocols and the implementation of encryption, masking, and data loss prevention techniques for sensitive information.
- Expertise in identity and access management principles, implementation, and governance with experience in privilege access management and zero-trust models.
- Strong knowledge of Cisco networking technologies (routers, switches, firewalls, VPN, SD-WAN, MPLS).
- Expertise in network security tools, including SASE (e.g., Zscaler), SIEM solutions, and vulnerability management platforms.
- Hands-on experience with virtualization technologies (VMware vSAN, vCenter) and containerization (Docker, Kubernetes).
- In-depth understanding of routing protocols (OSPF, BGP, EIGRP), VLANs, and wireless networking standards.
- Experience with infrastructure automation and Infrastructure as Code (IaC) using tools such as Terraform, ARM templates, or PowerShell.
Qualifications & Certifications
Education & Experience:
- Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's degree is preferred.
- Minimum 5+ years of progressive experience in IT infrastructure architecture, design, and management.
- Demonstrated experience in designing and implementing hybrid cloud architectures.
- Proven track record of successfully leading infrastructure transformation initiatives.
Certifications:
Required: At least one of the following:
- Microsoft Certified: Azure Solutions Architect Expert
- Microsoft Certified: Azure Administrator Associate
- Microsoft 365: Enterprise Administrator Expert
- Cisco Certified Network Professional (CCNP) or equivalent
Preferred: One or more of the following:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- Microsoft Certified: Security, Compliance, and Identity Fundamentals
- ITIL v4 Foundation
- VMware Certified Professional (VCP)
Core Competencies
- Strategic thinking and ability to align infrastructure initiatives with business objectives.
- Excellent problem-solving skills with the ability to diagnose complex infrastructure issues.
- Strong communication skills to effectively translate technical concepts for diverse audiences.
- Proactive approach to identifying and mitigating potential infrastructure and security risks.
- Self-motivated with the ability to work independently in a remote environment.
- Adaptability and willingness to learn new technologies and methodologies.
Work Conditions & Expectations
- This is a fully remote position with flexible working hours.
- Occasional travel may be required (up to 10%) for key projects and team collaboration.
- Availability to participate in scheduled maintenance windows and respond to critical incidents outside regular business hours.
- Access to a secure home office environment with a reliable high-speed internet connection.
