Azure Architect

Therma; Minneapolis (MN); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

401(k) Plan with Company Match

Health & Welfare Benefits

Life and Disability Insurance

Time Off

Expenses reimbursement

Job summary

Legence in Minneapolis, MN (Hybrid with travel) seeks an experienced Azure Architect to define, design, and govern cloud architecture standards ensuring scalable, secure, and cost-effective Azure solutions. You will partner with Infrastructure Engineering, Security, and Applications to drive migrations and modernization initiatives across the enterprise.

The role requires deep hands-on Azure expertise, design of landing zones, identity and security strategies, and strong leadership to mentor

Qualifications

• 8-12+ years of experience in infrastructure, cloud, or systems engineering roles with significant focus on Microsoft Azure.
• Deep hands-on experience designing and implementing Azure architectures at enterprise scale.
• Strong understanding of Azure IaaS and PaaS services, networking, security, and identity (Azure AD, SSO).

Responsibilities

• Design and document Azure architectures aligned with enterprise standards for security, scalability, resiliency, and performance.
• Define reference architectures, landing zones, and reusable design patterns for Azure workloads.
• Translate business and application requirements into end-to-end Azure solutions across compute, networking, storage, identity, and platform services.
• Architect and govern Azure services including IaaS, PaaS, networking, identity (Azure AD), monitoring, and automation.
• Provide architectural guidance for Azure networking designs including VNets, routing, VPN/ExpressRoute, firewalls, and load balancing.
• Guide secure identity and access management designs, including SSO and integration with enterprise directory services.
• Lead and support on-premises to Azure migration initiatives, modernization programs, and hybrid cloud architectures.
• Review and approve solution designs to ensure adherence to architectural principles and operational best practices.
• Partner with Infrastructure Engineers and Operations teams to ensure architectures are operationally supportable.
• Embed security-by-design principles into all Azure architectures.
• Ensure Azure solutions align with governance, compliance, and audit requirements for regulated environments.
• Define standards for monitoring, logging, backup, disaster recovery, and cost management.
• Act as a technical authority and mentor for Infrastructure and Cloud Engineering teams.
• Collaborate with application teams, security, compliance, and external partners to deliver enterprise Azure solutions.
• Communicate architecture decisions clearly to technical and non-technical stakeholders.

Skills

8-12+ years experience

Azure architectures

Azure IaaS/PaaS

Education

Bachelor’s degree in CS/IT or equivalent

Tools

Azure

Job description

About Legence

Legence (Nasdaq: LGN) is a leading provider of engineering, consulting, installation, and maintenance services for mission-critical systems in buildings. The company specializes in designing, fabricating, and installing complex HVAC, process piping, and other mechanical, electrical, and plumbing (MEP) systems - enhancing energy efficiency, reliability, and sustainability in new and existing facilities. Legence also delivers long-term performance through strategic upgrades and holistic solutions. Serving some of the world’s most technically demanding sectors, Legence counts over 60% of the Nasdaq-100 Index among its clients.

Hybrid position with travel requirements

Location: Minneapolis, MN or Louisville, KY

Overview

This position is responsible for defining, designing, and governing cloud architecture standards across the organization to ensure scalable, secure, resilient, and cost-effective solutions. This role provides technical leadership across infrastructure, networking, identity, security, and platform services, translating business and application requirements into enterprise-grade cloud architectures.

The Azure Architect partners closely with Infrastructure Engineering, Security, Applications, and external vendors to establish cloud best practices and guide complex Azure initiatives, including migrations, modernization efforts, and new cloud-native solutions.

Key Responsibilities

• Design and document Azure architectures aligned with enterprise standards for security, scalability, resiliency, and performance.


• Define reference architectures, landing zones, and reusable design patterns for Azure workloads.


• Translate business and application requirements into end-to-end Azure solutions across compute, networking, storage, identity, and platform services.


• Architect and govern Azure services including IaaS, PaaS, networking, identity (Azure AD), monitoring, and automation.


• Provide architectural guidance for Azure networking designs including VNets, routing, VPN/ExpressRoute, firewalls, and load balancing.


• Guide secure identity and access management designs, including SSO and integration with enterprise directory services.


• Lead and support on-premises to Azure migration initiatives, modernization programs, and hybrid cloud architectures.


• Review and approve solution designs to ensure adherence to architectural principles and operational best practices.


• Partner with Infrastructure Engineers and Operations teams to ensure architectures are operationally supportable.


• Security, Governance & Compliance
  
  
  
  • Embed security-by-design principles into all Azure architectures.
  
  
  • Ensure Azure solutions align with governance, compliance, and audit requirements for regulated environments.
  
  
  • Define standards for monitoring, logging, backup, disaster recovery, and cost management.
  
  


• Act as a technical authority and mentor for Infrastructure and Cloud Engineering teams.


• Collaborate with application teams, security, compliance, and external partners to deliver enterprise Azure solutions.


• Communicate architecture decisions clearly to technical and non-technical stakeholders.

Qualifications

Required

• Bachelor’s degree in Computer Science, Information Technology, or equivalent experience.


• 8-12+ years of experience in infrastructure, cloud, or systems engineering roles with significant focus on Microsoft Azure.


• Deep hands-on experience designing and implementing Azure architectures at enterprise scale.


• Strong understanding of Azure IaaS and PaaS services, networking, security, and identity (Azure AD, SSO).

Preferred

• Experience with hybrid cloud and on-premises integration.


• Experience with automation, scripting, and infrastructure-as-code practices.


• Azure certifications (e.g., Azure Solutions Architect Expert).


• Strong documentation, decision-making, and presentation skills.

Soft Skills

• Strategic thinker with strong problem-solving abilities.


• Ability to influence technical direction without direct authority.


• Highly collaborative, adaptable, and comfortable working across teams and vendors.

Compensation: $130k-$180k, depending on experience

#LI-JS1 #LI-Hybrid

Benefits Overview

• 401(k) Plan with Company Match: Currently match contributions dollar-for-dollar up to 4% of eligible pay; immediate vesting.


• Health & Welfare Benefits: Employer provided medical, dental, vision, prescription drug, Employee Assistance Program and accident & illness coverage.


• Life and Disability Insurance: Employer provided basic life insurance and AD&D valued at 50K coverage amount with the option for voluntary buy up for additional coverage.


• Time Off: Flexible non-accrual vacation; company holidays per policy. (For California employees, this is separate from California paid sick leave, if applicable.)


• Expenses: Business travel and related expenses reimbursed per company policy.

Employment Eligibility

Candidates must have current work authorization in the U.S.; visa sponsorship is not available for this position.

Pay Disclosure & Considerations

Where pay ranges are indicated, please note that a successful candidate's exact pay will be determined based relevant job -related factors, including any of the following: candidate's experience, skills, and qualifications, as well as geographic and market considerations. We are committed to ensuring fair and competitive compensation for all employees and comply with all applicable salary transparency laws.

Equal Employment Opportunity Employer

Legence and its affiliate companies are proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), marital or familial status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, other non-merit-based factors, and any other characteristic protected under applicable local, state or federal laws and regulations.

EEO is the Law