Senior Azure Cloud Engineer | Hybrid

Zeektek; Sacramento (CA); On-site; USD 130,000 - 190,000; Full time

Job summary

Zeektek is seeking a Senior Azure Cloud Engineer to lead design, build, and support of enterprise Azure infrastructure and migrate on‑premises and VMware workloads to Azure-native services. The role partners with infrastructure, security, networking, and application teams to drive cloud transformation, implement landing zones, governance, and cost controls, while ensuring high availability and security.

The ideal candidate has hands-on experience with IaC (Terraform/Bicep), PowerShell, and

Qualifications

• 7+ years in IT infrastructure engineering
• 5+ years in Microsoft Azure administration and engineering
• Hands-on VMware-to-Azure migration of enterprise workloads
• Experience with Azure Migrate and Azure Site Recovery
• Strong knowledge of Azure VMs, Storage, Networking, Defender for Cloud
• Advanced PowerShell scripting
• Experience with Microsoft 365, hybrid identity, and AD

Responsibilities

• Design, deploy, and maintain highly available Azure infrastructure
• Implement Azure Landing Zones and CAF-aligned governance
• Manage Azure networking (Virtual WAN, ExpressRoute, VPN)
• Assess environments and build migration roadmaps
• Lead VMware-to-Azure migrations using Azure Migrate and ASR
• Modernize legacy workloads to Azure-native solutions
• Administer Entra ID and hybrid identity
• Implement Conditional Access, MFA, PIM, and Zero Trust
• Monitor performance, availability, and cost
• Lead troubleshooting of complex infra issues

Skills

Azure administration

VMware-to-Azure migration

PowerShell scripting

Cloud governance

Hybrid identity

Active Directory

Azure networking

Education

Azure certifications: AZ-305, AZ-500

Tools

Terraform

Bicep

Job description

Location / Schedule:

[TBD: onsite/hybrid/remote, time zone] · [TBD: contract/FTE] · Occasional after-hours migration cutover work [confirm]

Overview

We’re hiring a Senior Azure Cloud Engineer to lead the design, build, and support of enterprise Azure infrastructure. The role also drives migration of on-premises and VMware workloads to Azure-native services. You’ll serve as technical lead for cloud transformation work and partner with infrastructure, security, networking, and application teams.

Responsibilities

Cloud infrastructure & architecture

• Design, deploy, and maintain highly available, resilient Microsoft Azure infrastructure.
• Implement Azure Landing Zones and governance frameworks aligned to the Cloud Adoption Framework (CAF).
• Manage Azure networking, including Virtual WAN, ExpressRoute, and site-to-site VPN.

Migration & modernization

• Assess current environments and build migration roadmaps.
• Plan and execute VMware-to-Azure migrations using Azure Migrate and Azure Site Recovery (ASR).
• Lead cloud-to-cloud migrations, including Microsoft 365 and Azure tenant-to-tenant migrations.
• Modernize legacy workloads into Azure-native solutions.

Identity & security

• Administer Microsoft Entra ID (Azure AD) and hybrid identity with Active Directory.
• Implement Conditional Access, MFA, Privileged Identity Management (PIM), and Zero Trust principles.
• Maintain compliance with security and governance standards.

Automation & Infrastructure as Code

• Automate deployment, configuration, and monitoring with PowerShell, Azure Automation, and Logic Apps.
• Build and maintain Infrastructure as Code (IaC) with Terraform and/or Bicep.

Operations

• Monitor performance, availability, and cost.
• Implement backup and disaster recovery (BCDR) solutions.
• Lead troubleshooting of complex infrastructure issues.

Required Qualifications

• 7+ years of IT infrastructure engineering experience.
• 5+ years of Microsoft Azure administration and engineering.
• Hands-on VMware-to-Azure migration of enterprise workloads.
• Experience with Azure Migrate, Azure Site Recovery, and the Cloud Adoption Framework.
• Strong knowledge of:
• Azure Virtual Machines, Storage, and Networking
• Microsoft Defender for Cloud (formerly Azure Security Center)
• Advanced PowerShell scripting.
• Experience with Microsoft 365, hybrid identity, and Active Directory.

Preferred Qualifications

• Terraform or Bicep.
• Mergers & acquisitions and tenant-to-tenant migration experience.
• Enterprise backup platforms such as Rubrik or Veeam.
• Certifications:
• Azure Solutions Architect Expert (AZ-305)
• Azure Security Engineer Associate (AZ-500)