Azure Cloud Architect

Job Description

Cloud Architecture & Enterprise Landing Zones
Architect and implement robust, secure, and scalable cloud infrastructure topologies on Microsoft Azure utilizing the Azure Well-Architected Framework and Cloud Adoption Framework (CAF).
Design enterprise-scale Azure Landing Zones, governing management groups, subscription topologies, Identity and Access Management (IAM/Azure AD/Entra ID), and cross-premises networking (ExpressRoute, VPN, Azure Virtual WAN).
Establish robust backup, business continuity, and Disaster Recovery (DR) architectures using Azure Site Recovery (ASR) and Azure Backup across paired regions to target near-zero RTO/RPO metrics.

“Infrastructure as Code (IaC) & DevOps Governance
Enforce an ““Infrastructure as Code”” operating model, ensuring all infrastructure provisioning is completely automated using Terraform, Bicep, or Azure Resource Manager (ARM) templates.
Define continuous integration and continuous deployment (CI/CD) standards for infrastructure and application delivery pipelines using Azure DevOps (Pipelines, Repos, Artifacts) or GitHub Actions.
Govern cloud spend and technical debt by implementing automated Azure Policies, custom optimization scripts, and cloud financial management processes (FinOps/Azure Cost Management).

Technologies & Skills
Compute & Containers
Azure Kubernetes Service (AKS), App Services, Azure Functions (Serverless), Container Instances
Networking & Identity
Microsoft Entra ID (Azure AD), ExpressRoute, Azure Virtual WAN, App Gateway/WAF, Private Link
Infrastructure as Code
Terraform, Azure Bicep, ARM Templates, PowerShell, Azure CLI
CI/CD & DevOps
Azure DevOps Pipelines, GitHub Actions, Git, Self-hosted runners
Data & Analytics
Azure SQL (Managed Instance), Cosmos DB, Azure Storage, Azure Synapse, Data Factory
Security & Monitoring
Defender for Cloud, Microsoft Sentinel, Azure Monitor, Log Analytics, Azure Key Vault
Migration Tools
Azure Migrate, Datacenter assessment tools, Database Migration Service (DMS)
Frameworks
Azure Well-Architected Framework, FinOps frameworks, Cloud Adoption Framework (CAF)

Preferred Certifications
Microsoft Certified: Azure Solutions Architect Expert (AZ-305) — Highly Preferred
Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Azure DevOps Engineer Expert (AZ-400)