Senior Azure Cloud Engineer / Cloud Solutions Architect - Remote

Senior Microsoft Cloud Engineer / Cloud Solutions Architect

Azure, Microsoft 365, AI & Data Platforms

Location: Remote

Employment Type: Full-time

Department: IT Infrastructure / Cloud Engineering

Salary: $130k - $175k

Position Overview

A growing organization is seeking a highly experienced Senior Microsoft Cloud Engineer / Cloud Solutions Architect to own the end-to-end design, architecture, security, governance, and ongoing evolution of its Microsoft cloud environment.

This is a high-autonomy, architect-level role for a hands-on technical leader who can translate enterprise business needs into secure, scalable cloud solutions. The successful candidate will work across Azure infrastructure, Microsoft 365, identity, endpoint management, cybersecurity, cloud governance, data platforms, and AI-enabled solutions.

The role requires someone who is equally comfortable leading technical design discussions, developing Infrastructure-as-Code, implementing cloud security controls, building deployment pipelines, administering enterprise platforms, and communicating architecture decisions to executive and technical stakeholders.

Key Responsibilities

Azure & Microsoft 365 Architecture

• Design, implement, and continuously improve enterprise-scale Microsoft Azure infrastructure across multiple subscriptions, environments, and business units.
• Architect Azure networking, compute, storage, identity, monitoring, governance, cost management, and security capabilities.
• Define and maintain cloud landing zones, hub-and-spoke networking, hybrid identity, subscription-management, and environment-segmentation standards.
• Apply Microsoft Cloud Adoption Framework and Well-Architected Framework principles to cloud design, governance, resiliency, security, and operational efficiency.
• Own end-to-end Microsoft 365 architecture across Exchange Online, SharePoint Online, OneDrive, Teams, Microsoft Entra ID, Intune, and Microsoft Purview.
• Develop strategic approaches to Microsoft 365 information architecture, collaboration models, tenant governance, security boundaries, data retention, and compliance controls.
• Lead Microsoft 365 migrations, workload modernization, tenant architecture, identity consolidation, and complex cross-environment or tenant-to-tenant initiatives as needed.
• Design high-availability, disaster recovery, backup, business continuity, and resilience strategies for Azure and Microsoft 365 workloads.

Cloud Engineering & DevSecOps

• Define and lead Infrastructure-as-Code standards using Bicep, ARM templates, Terraform, or comparable technologies.
• Build, improve, and maintain CI/CD pipelines for secure, repeatable deployment of cloud infrastructure, configuration, data, and application resources.
• Establish DevOps and DevSecOps practices, including source control, peer review, automated testing, security scanning, deployment approvals, and environment promotion.
• Develop automation using PowerShell, Python, Azure CLI, Azure PowerShell, APIs, and cloud-native automation services.
• Improve the reliability, consistency, observability, and supportability of cloud environments through automation, monitoring, alerting, and operational runbooks.
• Partner with engineering, security, data, and IT operations teams to establish scalable standards for cloud delivery.

Security & Governance

• Design and implement Zero Trust security architecture across identity, endpoints, networks, applications, cloud infrastructure, data, and AI solutions.
• Own the technical architecture of Microsoft security services, including Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Microsoft Sentinel, and Microsoft Purview.
• Design and maintain Entra ID security controls, including Conditional Access, Multi-Factor Authentication, Privileged Identity Management, RBAC, identity governance, access reviews, hybrid identity, and privileged-access standards.
• Establish cloud-governance controls for subscription design, resource tagging, cost allocation, budgets, policy enforcement, Azure Policy, resource standards, and exception management.
• Implement data-governance and compliance controls such as data classification, sensitivity labels, DLP, retention, eDiscovery, information protection, data lineage, audit logging, and insider-risk controls.
• Ensure security-by-design and privacy-by-design principles are embedded in cloud, data, automati…