Azure Cloud Architect (1148643)

The Judge Group; Boston (MA); On-site; USD 140,000 - 145,000; Full time

Job summary

The Judge Group is seeking an Azure Cloud Architect in Boston, MA to lead enterprise-scale cloud migrations and governance. You will design secure, resilient architectures across Azure and AWS, focusing on IaC, DevSecOps pipelines, and governance aligned to enterprise standards.

You will implement Terraform, ARM templates, and GitHub Actions, while integrating Vault, Entra ID, and security controls. This role concentrates on cross-region DR, encryption, and scalable cloud patterns in a fulltime

Qualifications

• Cloud architect with hands-on experience in designing enterprise-scale Azure and AWS environments.
• Experience implementing IaC and CI/CD pipelines for secure, compliant deployments.
• Strong background in DevSecOps automation, encryption, and zero-trust architectures.

Responsibilities

• Design and implement IaC using Terraform Enterprise and ARM templates, plus GitHub action pipelines.
• Lead design and management of DevSecOps pipelines with Harness and GitHub Actions.
• Architect hosting solutions using AKS, ACA, ECS, EC2, Azure VM app services & function apps.
• Implement API management, Vault integration, Entra ID, Gateways, WAFs, and load balancers.
• Develop data solutions with Azure SQL MI, CosmosDB, Synapse, and Snowflake on Azure.
• Enforce zero-trust and MFA, manage encryption, and perform security testing (DAST, PEN).
• Ensure cross-region disaster recovery and cross-region active-active architectures.

Skills

Terraform

ARM templates

GitHub Actions

DevSecOps

Pipelines

Azure

AWS

AKS

Cloud architecture

Zero-Trust

RBAC

MFA

mTLS

Security testing

Disaster recovery

Vault

Tools

HashiCorp Vault

Harness

Azure

AWS

AZURE SQL MI

CosmosDB

Synapse Analytics

Snowflake on Azure

Job description

Location: Boston, MA

Salary: $140,000.00 USD Annually - $145,000.00 USD Annually

Description:

Azure Cloud Architect

Boston, MA 02108

Fulltime

Hands-on Cloud Architect to lead the Cloud Migration architecture, design, implementation, and governance of enterprise-scale Azure and AWS environments. Candidate combines deep technical expertise in DevSecOps automation to host Application and Data on the Azure cloud. Candidate should bring in the ability to design a secure, resilient, and compliant architectures aligned to enterprise standards.

Job Description

• Design and implement Infrastructure as Code (IaC) using Hashicorp Terraform Enterprise, and ARM templates, and GitHub action pipelines for enterprise customers.
• Hands on experience in Design, build and manage DevSecOps pipelines with Harness and GitHub Actions.
• Design and implement solutions to host applications using services like AKS, ACA, ECS, EC2, Azure VM app services & function apps on ASP/ASE, SWA, CDNs
• Experience implementing API management services, HashiCorp vault integration, implementing Entra ID and ForgeRock, Gateways, WAFs, Load balancers, message, event and other communication components
• Data solutions covering Azure SQL MI, Oracle Exadata, data lake, CosmosDB, Synapse analytics, Snowflake on azure, etc.
• Implement Zero-Trust, defense in depth architectures using Azure RBAC, Entra IDs, experience working with MFA, MIs, App registrations, etc.
• Strong understanding of implementing encryption for data at rest and in transit, experience implementing mTLS, etc,. Working with security testing like DAST, PEN test,
• Exposure to Black Duck vulnerability scanning integration
• Strong understanding of networking covering segmentation, routing, filtering, etc., DNS, Firewalls, Proxies, use of appliances, etc.
• Experience in integrating with enterprise certificate management and key management services Hashicorp Vault
• Experience designing highly resilient architectures, with cross-region disaster recovery capabilities at service and platform levels, meeting strict RTO/RPO targets.
• Experience designing and implementing cross-region active-active solutions, spanning public cloud and on-premises.
• Experience in both Azure and AWS migrations will be preferred.