Senior Azure Architect

CAQH; Washington (District of Columbia); Remote; USD 160,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

Paid parental leave

Tuition assistance

Generous PTO

Job summary

CAQH is seeking a Senior Azure Architect to lead end-to-end Azure platform design, including landing zones, networking, identity, resilience, and governance for healthcare data products. You will shape standards, review vendor designs, and stay hands-on to validate designs before adoption.

The role is full-time, remote in the United States, reporting to the Director, Enterprise Architecture & Infrastructure. 8+ years in cloud infra with 5+ years in enterprise Azure design are required.

Qualifications

• 8+ years in infrastructure or cloud engineering.
• At least 5 years designing enterprise Azure environments as cloud/solutions architect.
• Healthcare or regulated industry experience preferred; vendor/managed service delivery experience a plus.

Responsibilities

• Lead architecture design for Azure platforms and initiatives, including landing zones, hub-and-spoke networking, and shared services.
• Design for resilience with target availability, RTO, and RPO; plan multi-region DR at reasonable cost.
• Develop and apply Azure standards via Azure Policy and reusable IaC modules (Terraform; Helm for Kubernetes; Bicep a plus).
• Review vendor designs and ensure alignment to standards, approving or steering as needed.
• Lead network architecture across regions; maintain DNS, hybrid connectivity, and zero-trust security.
• Collaborate with Information Security to meet HIPAA, SOC 2, HITRUST with strong PHI controls.
• Manage cloud costs within budgets (FinOps): tagging, right-sizing, reservations, and cost-conscious architecture.
• Design platform foundations for AI workloads (Azure OpenAI, AI Foundry) and secure access patterns.
• Enhance observability with OpenTelemetry, Azure Monitor, Log Analytics, Application Insights.
• Mentor engineers and raise team Azure design skills; document decisions and architectures.

Skills

Azure architecture

Azure networking

Multi-region DR design

Identity & Entra ID

Infrastructure as code

Cloud security

FinOps

AI coding assistants

Vendor management

Agile/SAFe

Education

Bachelor's degree in CS/Engineering/IS

Azure Solutions Architect Expert (AZ-305)

Tools

Terraform

Bicep

Helm

Kubernetes

Azure Policy

Azure Monitor

Job description

CAQH

Position Summary

As a Senior Azure Architect, you will lead the design of DataSpring's Azure platform: the landing zones, networking, identity, resilience, and governance that our healthcare data products run on. DataSpring runs several production platforms in Azure that handle protected health information for health plans and providers nationwide, and we are bringing more of their design and operation in-house from vendors. You will help shape our Azure standards, review vendor designs against them, and stay hands‑on enough to prove a design before it is adopted. The ideal candidate has designed enterprise Azure environments end to end in a regulated industry, knows where Azure designs break under real load and real outages, and uses AI tools such as Claude Code to work faster.

This is a full‑time, remote, exempt position and reports to the Director, Enterprise Architecture & Infrastructure.

Specific Responsibilities

• Lead architecture design for Azure platforms and initiatives, and contribute to the target‑state architecture set by the Director, including landing zones, management group and subscription design, hub‑and‑spoke networking, and shared services such as API Management, messaging, and identity.
• Design for resilience: recommend availability, recovery time, and recovery point targets for each platform, and design and regularly test multi‑region and disaster recovery patterns that meet them at a reasonable cost.
• Develop and apply Azure standards through Azure Policy, reference architectures, and reusable infrastructure‑as‑code modules (Terraform; Helm for Kubernetes workloads; Bicep a plus).
• Review designs from implementation vendors and partner teams on assigned projects before build, recommend approval, and hold them to the agreed standards through delivery.
• Lead network architecture, including private, edge, and global traffic management across regions. Responsible for maintaining DNS, hybrid connectivity, and zero‑trust network security and segmentation across projects and environments.
• Partner with Information Security to meet HIPAA, SOC 2, and HITRUST requirements, with strong controls for PHI, identity and access (Microsoft Entra ID, managed identities, privileged access), encryption, and logging.
• Manage cloud costs for assigned projects within approved budgets (FinOps): tagging and showback, right‑sizing, reservations and savings plans, and architecture choices that lower run cost.
• Design the platform foundations for AI workloads, including Azure OpenAI and AI Foundry capacity, gateways, and secure access patterns.
• Implement and improve observability practices (LGTM, OpenTelemetry, Azure Monitor, Log Analytics, Application Insights) so incidents can be detected, diagnosed, and traced to root cause.
• Serve as an escalation point for complex Azure incidents and lead the design fixes that follow.
• Mentor engineers on the Architecture and Infrastructure team and raise the team's Azure design skills.
• Document architecture decisions and maintain current‑state and target‑state diagrams.
• Report weekly status on architecture initiatives to designated DataSpring management.
• Follow all DataSpring Policies and Procedures.

Skills

• Deep, hands‑on expertise in Azure architecture: landing zones, management groups and subscriptions, Azure Policy, and the Cloud Adoption and Well‑Architected Frameworks.
• Strong Azure networking: hub‑and‑spoke and Virtual WAN, Private Link, Azure DNS, Application Gateway and Front Door, Azure Firewall, and hybrid connectivity.
• Proven design of multi‑region, highly available, and disaster recovery architectures for PaaS and container workloads (App Service, AKS, Azure SQL, Cosmos DB, Storage).
• Identity architecture with Microsoft Entra ID across multiple tenants, including managed identities, RBAC, Conditional Access, and privileged access.
• Infrastructure as code (Terraform required; Bicep a plus) and CI/CD for infrastructure; able to write and review modules, not just specify them.
• Cloud security in a regulated environment (HIPAA, SOC 2, HITRUST): encryption, key management, logging, and defense in depth.
• FinOps practice: reading Azure cost data, forecasting spend, and designing for cost.
• Ability to explain design trade‑offs clearly to engineers, vendors, and executives, and to push back on a vendor design with evidence.
• Demonstrated use of AI coding assistants (e.g., Claude Code, Cursor) to accelerate design, infrastructure as code, and analysis.
• Familiarity with Agile, Scrum, or SAFe delivery is a plus.

Experience & Education

• 8+ years in infrastructure or cloud engineering, with at least 5 years designing Azure environments at enterprise scale as a cloud or solutions architect.
• Has led an Azure landing zone or platform design in production, including a disaster recovery design that was tested. Healthcare or other regulated‑industry experience (HIPAA, SOC 2, HITRUST) strongly preferred; experience directing vendor or managed‑service delivery teams is a plus.
• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field, or an equivalent combination of education and experience.
• Microsoft Certified: Azure Solutions Architect Expert (AZ‑305) strongly preferred; Azure networking or security specialty certifications are a plus.

Who We Are

DataSpring is the trusted data connector at the core of healthcare. For more than 25 years, we have powered the industry with the largest and most complete healthcare data foundation in the U.S., including more than 4.8 million provider data records sourced directly from providers and member data representing 75% of covered lives supplied by health plans. By improving how essential information flows across the system, DataSpring helps healthcare operate more efficiently, accurately, and with greater confidence.

What You Get

At DataSpring, you will do meaningful work at the intersection of healthcare, data, and technology, helping solve complex problems that make the healthcare system work better. You will collaborate with experienced professionals who care deeply about accuracy, trust, and meaningful impact in a fully remote environment.

DataSpring offers competitive compensation and a comprehensive benefits package for full‑time employees, including medical, dental, and vision coverage, a 401(k) with company contributions and matching, paid parental leave, tuition assistance, and generous paid time off. We are committed to investing in our people and supporting professional growth over time.

Equal Opportunity Employer

DataSpring is proud to be an equal opportunity employer and is committed to fostering a workplace where all individuals are valued, respected, and empowered.

Employment decisions at DataSpring are made without regard to race, color, religion, sex, national origin or ancestry, age, marital status, disability, protected veteran status, personal appearance, sexual orientation, gender identity or expression, familial status, family responsibilities, matriculation, political affiliation, genetic information, source of income or any other characteristic protected by law. DataSpring does not tolerate unlawful discrimination or harassment of any kind.

Applicants have rights under the Family and Medical Leave Act (FMLA), Equal Employment Opportunity (EEO), and the Employee Polygraph Protection Act (EPPA). If you need a reasonable accommodation to apply for a posted position, please contact the DataSpring People & Culture team at [e-mail] or 202-517-0436.

Pay Range and Equal Employment Opportunity

160,000 - 185,000 USD per year (Remote (United States)) Equal Employment Opportunity/M/F/disability/protected veteran status

PI287914130