Sr. Azure Cloud Architect

KLA; Milpitas (CA); In loco; USD 138.000 - 234.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, dental, vision insurance

401(k) with company match

Employee stock purchase program (ESPP)

Paid time off & holidays

Tuition assistance & wellness programs

Descrizione del lavoro

KLA is seeking a hands-on Senior Azure Cloud Architect to join the Cloud & AI Platform organization in Milpitas, CA. The role designs, implements, secures, and optimizes enterprise Azure solutions while supporting hybrid integration with on-prem systems and other clouds.

You will work with Infrastructure, Cybersecurity, Applications, Data, and Business teams to deliver scalable, resilient cloud environments, using Terraform and Azure Bicep, and guiding cloud governance and FinOps practices.

Competenze

• Bachelor's degree in computer science, engineering or IT with 8+ years of related experience or a master's with 5+ years.
• Five+ years of hands-on Microsoft Azure architecture/engineering in enterprise production environments.
• Strong experience with Azure IaaS/PaaS, networking, identity, security, governance and monitoring.

Mansioni

• Design, implement, and support scalable, secure Azure solutions (IaaS and PaaS).
• Lead Azure landing zones, RBAC, policies, and governance controls.
• Drive Azure migration and modernization: re-hosting, re-platforming, refactoring.
• Architect Azure networking: VNets, NSGs, Private Link, ExpressRoute, DNS.
• Ensure Zero Trust, identity-first security, and secrets management.
• Develop IaC with Terraform and Bicep/ARM templates; automate validation.

Conoscenze

Azure architecture

Azure IaaS/PaaS

Cloud networking

Identity security

Kubernetes

Terraform

Azure Bicep/ARM

Monitoring & observability

FinOps

Formazione

Bachelor's degree in CS/CE/IT

Master's degree (preferred)

Strumenti

Terraform

Azure Bicep/ARM

ExpressRoute/VPN

Azure Policy

Descrizione del lavoro

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology. Group/Division KLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.

What You'll Do In this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise. KLA is seeking a hands-on Senior Azure Cloud Architect to join the Cloud & AI Platform organization. This role is responsible for designing, implementing, securing, and optimizing enterprise solutions on Microsoft Azure, while supporting hybrid integration with on-premises infrastructure and other cloud platforms. The successful candidate will combine strong Azure architecture knowledge with practical engineering experience across cloud networking, identity, security, automation, platform services, Kubernetes, monitoring, and cost optimization. The architect will work closely with Infrastructure, Cybersecurity, Application Development, Data, Engineering, and Business teams to deliver scalable, resilient, secure, and supportable cloud solutions.

Key Responsibilities

• Design, implement, and support scalable, highly available, resilient, and secure solutions using Microsoft Azure IaaS and PaaS services.
• Design and maintain Azure landing-zone capabilities, including management-group and subscription organization, Azure Policy, role-based access control, tagging, resource standards, and governance controls.
• Lead and support Azure migration and modernization activities, including re-hosting, re-platforming, refactoring, and integration of on-premises workloads.
• Architect Azure networking solutions using Virtual Networks, subnets, network security groups, route tables, load balancers, Private Link, Private Endpoints, Azure Firewall, VPN Gateway, ExpressRoute, and DNS services.
• Design network segmentation and micro-segmentation patterns aligned with Zero Trust principles, workload isolation requirements, and approved traffic flows.
• Implement identity-first security using Microsoft Entra ID, managed identities, RBAC, least-privilege access, Privileged Identity Management, Conditional Access, Key Vault, and secrets-management practices.
• Develop and maintain Infrastructure as Code using Terraform and Azure Bicep/ARM templates, with reusable modules, source control, peer review, and automated validation.
• Architect and support Azure Kubernetes Service, containerized workloads, registries, ingress, workload identity, policy enforcement, monitoring, and platform lifecycle activities.
• Configure and support Azure resources including virtual machines, storage accounts, web applications, databases, integration services, AI resources, and platform services.
• Implement monitoring, logging, alerting, and operational visibility using Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Microsoft Sentinel integrations.
• Optimize Azure services for availability, reliability, performance, security, and cost efficiency; support tagging, budgets, utilization reviews, and FinOps practices.
• Support Azure AI and Azure OpenAI solutions by applying approved identity, networking, data-protection, logging, and governance patterns.
• Participate in architecture reviews, security reviews, threat assessments, disaster-recovery planning, operational-readiness reviews, and production troubleshooting.
• Create and maintain architecture diagrams, solution designs, implementation guides, standards, runbooks, and operational documentation.
• Collaborate with engineering, infrastructure, security, application, data, and business stakeholders to gather requirements and translate them into practical cloud solutions.
• Provide technical guidance and knowledge transfer to cloud engineers and partner teams while remaining directly involved in implementation and issue resolution.

Minimum Qualifications

• Bachelor's degree in computer science, Computer Engineering, Information Technology, or a related field, with eight (8) years of related experience; or a master's degree with five years of related experience
• Five (5) years of hands-on Microsoft Azure architecture or engineering experience supporting enterprise production environments
• Strong experience with Azure IaaS and PaaS services, cloud networking, identity, security, governance, monitoring, and operational support
• Hands‑on experience with Azure landing zones, Azure Policy, RBAC, Microsoft Entra ID, Private Link, ExpressRoute or VPN connectivity, and Azure security services
• Experience troubleshooting complex Azure infrastructure, networking, identity, security, deployment, and application-connectivity issues
• Understanding cloud security principles including encryption, key management, secrets management, network segmentation, logging, least privilege, and Zero Trust
• Knowledge of cloud governance, observability, business continuity, disaster recovery, cost management, and operational excellence
• Strong written and verbal communication skills, with the ability to produce clear technical documentation and collaborate across teams.

About KLA We provide advanced inspection tools, metrology systems, process solutions, and computational analytics that make electronics possible, tackling complex challenges. From electron and photon optics to machine learning and data analytics, we seek perfection at the most fundamental level of matter in the universe. If you want to make electronics that push industries forward and make the world a better place, join us.

Total Rewards Base Pay Range: $137,800.00 - $234,300.00 Annually Primary Location: USA-CA-Milpitas-KLA KLA's total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave. Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

Use of AI Statement At KLA, our interviews seek to understand your individual skills, problem-solving approach and authentic thinking. To ensure a fair and consistent evaluation, the use of AI, recording tools or other technologies to generate, suggest or provide responses during interviews—whether virtual or in person is not permitted unless explicitly approved in advance as part of a reasonable accommodation or invited by the interviewer. Use of these tools may interfere with our ability to evaluate your individual qualifications and affect your candidacy. KLA is committed to advancing innovation through responsible AI, and we value candidates who share this mindset.

Equal Opportunity Statement KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at [e-mail] or at [phone] to request accommodation. For additional information, view the US Know Your Rights poster on the U.S. Equal Employment Opportunity Commission website. We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.

Additional Information Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment. Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLA’s Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to [e-mail] to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.