Azure Cloud Architect

Job Summary

We’re seeking an Azure Cloud Security Architect to design and implement secure, scalable Azure architecture across all environments. This includes subscription structure, network topology, and Well-Architected Framework alignment; provisioning core Azure infrastructure (VNets, App Services, VMs, SQL, Storage, Key Vault, AKS); implementing IAM and Zero Trust controls (RBAC, Entra ID, MFA, Conditional Access, PIM); and enforcing governance and compliance (Azure Policy, ISO 27001, NIST). The role also covers risk/vulnerability assessments, DevSecOps integration, and producing runbooks and architecture documentation for knowledge transfer.

Mandatory Skills/Experience:

• Extensive experience designing and implementing Azure cloud architecture in enterprise environments
• Strong knowledge of Azure Well-Architected Framework and cloud best practices (security, scalability, resilience, governance)
• Hands-on Azure networking experience (VNets, subnets, NSGs, Azure Firewall, WAF, private endpoints)
• Azure infrastructure provisioning experience (App Services, VMs, Storage, SQL, Key Vault)
• Strong IAM expertise (Entra ID, RBAC, MFA, Conditional Access, PIM)
• Solid understanding of Zero Trust security architecture
• Experience implementing Azure Policy, governance controls, and security baselines
• Knowledge of cloud security, threat modeling, and risk assessment
• Familiarity with ISO 27001, NIST, and related compliance frameworks
• DevSecOps experience with CI/CD security integration
• Strong documentation skills (architecture diagrams, runbooks, technical docs)
• Excellent communication and stakeholder engagement skills

Desirable Skills/Experience:

• PowerShell and Azure CLI scripting
• GitHub Actions and Azure cost management
• Azure Administrator Associate certification
• Azure Solutions Architect Expert certification

Pay: From $95.00 per hour

Experience:

• Azure architecture: 6 years (Preferred)
• Azure provisioning: 5 years (Preferred)
• Azure IAM: 4 years (Preferred)
• Azure networking: 4 years (Preferred)
• Azure governance: 4 years (Preferred)
• Well-Architected: 4 years (Preferred)
• Risk assessment: 4 years (Preferred)
• Zero Trust : 3 years (Preferred)
• ISO 27001/NIST: 3 years (Preferred)
• DevSecOps: 3 years (Preferred)
• PowerShell/CLI: 2 years (Preferred)
• Azure cost mgmt: 2 years (Preferred)

Work Location: In person