Title: Senior Azure Cloud Architect / Platform Engineer
Location: Remote from USA (prefer not from CA, OR, WA, CO, MA, CT)
Perm/Full-time
Work hours: Must be willing to work M-F 8-5 EST or AZ time zone
Citizenship: Must be current Green Card holder or US Citizen to apply; not able to sponsor a visa at this time

Senior Azure Cloud Architect / Platform Engineer
The candidate should have personally designed, built, and operated Azure environments at scale and can own architecture decisions while still being hands-on in technology as is often the case in smaller/mid-size companies. Candidate should think operationally & not just architecturally and understand the long-term strategy. Also be willing to challenge existing designs and find improvements but also be willing to work collaboratively and be willing to receive constructive criticism. Someone who takes ownership of the architecture and the outcomes and not just task oriented.

What Success Looks Like
This candidate will be the technical lead for Azure infrastructure, cloud architecture, networking, and platform engineering.

They must be capable of:

• Designing Azure landing zones from scratch
• Building enterprise hub-and-spoke or Virtual WAN architectures
• Implementing governance using Management Groups, Azure Policy, RBAC, and Entra ID
• Building Infrastructure as Code solutions using Bicep or Terraform
• Designing secure networking including VPNs, ExpressRoute, NSGs, Azure Firewall, and private endpoints
• Supporting both commercial Azure and Azure Government environments
• Working directly with application teams to design cloud-native solutions
• Creating repeatable deployment patterns rather than one-off solutions
• Working with both brownfield and greenfield implementations
• Troubleshooting complex Azure issues without relying on Microsoft support

Must-Have Technical Experience
The candidate should have deep hands-on experience with:

• Azure Networking
• Entra ID
• Azure Virtual Networks
• Hub-and-Spoke Architecture
• Virtual WAN
• Azure Firewall
• VPN Connectivity
• Azure Policy
• Management Groups
• IaC- Infrastructure as Code (Bicep preferred, Terraform acceptable)
• Azure DevOps
• CI/CD Pipelines
• Monitoring and Observability
• Cost Management and FinOps

Bonus Experience
Strong preference for candidates with experience in:

• Azure Government and Commercial Cloud
• State or Federal government environments
• NIST 800-53
• CJIS
• Kubernetes / AKS
• Managed Identities
• SQL High Availability
• Hybrid Identity
• Zero Trust Architecture

Candidates that will not fit
Candidates whose experience is primarily:

• Office 365 administration
• Help Desk
• Traditional Windows Server administration
• Pure networking roles
• Project management
• Solution sales engineering
• Architects that are purely consulting and not in it for the long-plan
• Architects who do not actively build (design only but not hands on implementation)

Personality and Work Style
The ideal candidate:

• Can challenge existing designs
• Thinks operationally, not just architecturally
• Understands long term strategy
• Documents decisions
• Can mentor junior engineers
• Is comfortable working in a fast-moving environment with limited bureaucracy
• Takes ownership of outcomes, not just tasks

#KSSJ

#ALLJ

Work Location: In person