Description

Key Responsibilities
Architecture & Design
•    Own end-to-end Azure architecture, including landing zone design, management group and subscription structure, and platform standards.
•    Design scalable, secure, and resilient cloud solutions for a global, multi-site organization.
•    Develop and maintain cloud reference architectures, standards, diagrams, and documentation from the ground up.
•    Lead cloud initiatives as part of ongoing infrastructure modernization and transformation.

Platform & Operations
•    Own the health, reliability, and performance of the Azure platform across compute, storage, and PaaS services.
•    Serve as the primary escalation point for cloud-related issues and incidents.
•    Establish monitoring, alerting, and operational processes as the environment matures.
•    Manage capacity, performance, and resilience across the estate.

Infrastructure as Code & Automation
•    Build and maintain infrastructure as code using Terraform and/or Bicep for repeatable, version-controlled deployments.
•    Establish CI/CD pipelines for infrastructure and supporting workloads.
•    Reduce manual processes and improve repeatability where it adds value.

Security, Identity & Governance
•    Design and manage Azure identity and access through Entra ID, including RBAC, conditional access, and privileged access.
•    Implement cloud security controls and guardrails, including Azure Policy and baseline configurations.
•    Support compliance efforts aligned to the organization's regulatory requirements.

Cost & Optimization
•      Establish cost visibility and governance, and right-size and optimize spend across the estate.
•      Balance performance, security, and cost as the platform scales.

Collaboration
•    Partner with the Network Engineer / Architect on hybrid connectivity, and with Systems Administrators and Service Desk teams.
•    Act as a technical advisor to IT leadership and cross-functional stakeholders.
•    Communicate cloud design decisions and tradeoffs clearly to technical and non-technical audiences.

What Success Looks Like
•    A documented, well-governed Azure landing zone and architecture where none existed before.
•    Repeatable, infrastructure-as-code provisioning that replaces manual builds.
•    A strong identity, security, and policy posture aligned to compliance needs.
•    Clear visibility into cloud spend, with cost kept under control as usage grows.
•    A cloud platform that scales to support company growth and global operations.

Must-Have Qualifications
These are the hard screens. Candidates without them should not be submitted:
•    7+ years in cloud engineering and architecture roles, with deep, recent Azure focus.
•    Azure architecture and landing zone design, including management groups, subscriptions, and governance.
•    Infrastructure as code with Terraform and/or Bicep, used in production for real deployments.
•    Azure security and identity with Entra ID, including RBAC, conditional access, and Azure Policy.
•    Proven ability to design, build, and operate cloud environments end-to-end.
•    Demonstrated ownership of both strategy and execution.
•    Strong troubleshooting skills in complex cloud and hybrid environments.

Strong Pluses
Not required to be submitted, but these meaningfully strengthen a candidate:
•    Experience in HIPAA / HITRUST or comparable regulated, compliance-driven environments.
•    Container platforms and orchestration, including AKS and Kubernetes.
•    CI/CD tooling such as Azure DevOps or GitHub Actions.
•    Cloud cost management and FinOps practices.
•    Depth in Azure data and PaaS services.
•    Certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator, or Azure DevOps Engineer Expert

Key Skills

Education

Bachelor's degree