Azure Cloud Architect

TechDigital Group; Milpitas (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

TechDigital Group in Milpitas, CA seeks an Azure Cloud Architect to lead enterprise cloud design on Microsoft Azure, guiding architecture, governance, security, and modernization initiatives.

You will collaborate with stakeholders, run migration roadmaps, design AKS, App Services, and serverless options, while ensuring cost efficiency and compliance.

Qualifications

• 12+ years of IT experience with 7+ years designing Azure cloud solutions.
• Experience leading enterprise cloud transformations.
• Expertise in hybrid cloud environments and security architectures.
• Strong governance and cost-management capabilities.

Responsibilities

• Define and implement Azure architecture standards and governance.
• Develop migration roadmaps and modernization initiatives.
• Design scalable, resilient Azure solutions for enterprise workloads.
• Lead security, compliance, and Zero Trust initiatives.
• Drive CI/CD pipelines with Azure DevOps and GitHub Actions.
• Monitor costs and optimize cloud spend with FinOps.
• Mentor engineers and communicate architecture to leadership.

Skills

Cloud architecture leadership

Security governance

DevOps practices

Stakeholder collaboration

Education

Bachelor's degree in Computer Science or related

Master's degree preferred

Tools

Terraform

Bicep

ARM Templates

PowerShell

Azure CLI

Python

Azure DevOps

GitHub Enterprise

Kubernetes

Job description

Experience Required:

12+ Years Overall IT Experience with 7+ Years in Azure Cloud Architecture

Position Overview

Seeking a highly skilled and experienced Azure Cloud Architect to lead the design, implementation, governance, and optimization of enterprise-scale cloud solutions on Microsoft Azure. The ideal candidate will have deep expertise in cloud architecture, infrastructure modernization, security, automation, DevOps, and hybrid cloud environments. This role will work closely with business stakeholders, enterprise architects, application teams, cybersecurity teams, and operations teams to design scalable, secure, and cost-efficient cloud solutions that align with strategic technology roadmap.

The candidate should possess strong technical leadership capabilities and experience driving large-scale cloud transformation initiatives within complex enterprise environments.

Key Responsibilities

Cloud Strategy & Architecture

• Define and implement Azure cloud architecture standards, governance frameworks, and best practices.
• Develop enterprise cloud adoption strategies, migration roadmaps, and modernization initiatives.
• Design highly available, resilient, and scalable cloud solutions aligned with business requirements.
• Provide architecture guidance for cloud-native and hybrid-cloud solutions.
• Lead cloud architecture reviews and ensure compliance with enterprise standards.

Azure Infrastructure & Platform Services

• Architect and implement Azure IaaS, PaaS, and SaaS solutions.
• Design and manage:
  • Azure Virtual Networks
  • Azure Landing Zones
  • Azure ExpressRoute
  • Azure VPN Gateways
  • Azure Load Balancers
  • Azure Application Gateway and WAF
  • Azure DNS
  • Azure Storage Services
• Create multi-region and disaster recovery architectures.

Cloud Migration & Modernization

• Assess existing on-premises environments and create migration strategies.
• Lead migration of applications, databases, and infrastructure to Azure.
• Design cloud-native solutions leveraging:
  • Azure Kubernetes Service (AKS)
  • Azure App Services
  • Azure Functions
  • Azure Container Apps
  • Azure Logic Apps
• Drive modernization of legacy applications and infrastructure.

Security & Compliance

• Implement Azure security architecture aligned with Zero Trust principles.
• Design and manage:
  • Microsoft Entra ID (Azure AD)
  • Conditional Access
  • Privileged Identity Management (PIM)
  • Azure Key Vault
  • Microsoft Defender for Cloud
  • Microsoft Sentinel
• Ensure compliance with enterprise security policies and regulatory requirements.
• Conduct architecture security reviews and risk assessments.

DevOps & Automation

• Design CI/CD pipelines using Azure DevOps and GitHub Actions.
• Implement Infrastructure as Code (IaC) solutions using:
  • Terraform
  • Bicep
  • ARM Templates
• Automate provisioning, monitoring, and operational tasks.
• Support SRE and cloud operations teams in automation initiatives.

Cost Management & Governance

• Establish Azure governance and resource management frameworks.
• Implement tagging standards and cost allocation models.
• Optimize Azure spend through FinOps practices.
• Monitor cloud consumption and recommend cost-reduction strategies.

Monitoring & Operational Excellence

• Design enterprise monitoring solutions using:
  • Azure Monitor
  • Log Analytics
  • Application Insights
  • Microsoft Sentinel
• Ensure observability, performance monitoring, and operational readiness.
• Support disaster recovery and business continuity planning.

Leadership & Stakeholder Management

• Serve as the cloud subject matter expert for Azure technologies.
• Mentor engineers, administrators, and junior architects.
• Collaborate with security, networking, application, infrastructure, and business teams.
• Present architecture recommendations to executive leadership and technical governance boards.

Required Qualifications

Education

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.
• Master's degree preferred.

Experience

• 12+ years of overall IT experience.
• 7+ years of hands-on experience designing Azure cloud solutions.
• Experience leading enterprise cloud transformation programs.
• Experience with hybrid cloud and large-scale enterprise environments.
• Strong understanding of cloud governance and security frameworks.

Technical Skills

Azure Services

• Azure Virtual Machines
• Azure Kubernetes Service (AKS)
• Azure App Services
• Azure Functions
• Azure Storage Accounts
• Azure SQL Database
• Azure Cosmos DB
• Azure Data Factory
• Azure Synapse Analytics
• Azure Networking Services

Identity & Security

• Microsoft Entra ID
• Azure AD Connect
• PIM
• Azure Key Vault
• Microsoft Defender for Cloud
• Microsoft Sentinel
• RBAC
• Zero Trust Architecture

Infrastructure as Code & Automation

• Terraform
• Bicep
• ARM Templates
• PowerShell
• Azure CLI
• Python

DevOps

• Azure DevOps
• GitHub Enterprise
• CI/CD Pipelines
• Containerization
• Docker
• Kubernetes

Monitoring & Observability

• Azure Monitor
• Application Insights
• Log Analytics
• Splunk (Preferred)

Preferred Qualifications

• Experience in semiconductor manufacturing, high-tech engineering, or global enterprise environments.
• Experience supporting large-scale global infrastructure environments.
• Knowledge of enterprise networking and security architecture.
• Experience integrating Azure with ServiceNow, ITSM, and Enterprise Monitoring platforms.
• Familiarity with AI/ML, Data Analytics, and Azure OpenAI services.
• Experience implementing Landing Zones using Microsoft Cloud Adoption Framework (CAF).

Certifications (Required/Preferred)

Required

Microsoft Certified: Azure Solutions Architect Expert (AZ-305)

Preferred

• Azure Administrator Associate (AZ-104)
• Azure Security Engineer Associate (AZ-500)
• Azure DevOps Engineer Expert (AZ-400)
• Certified Kubernetes Administrator (CKA)
• TOGAF Certification
• CISSP