ZR_2885_JOB

Zohorecruit; Pittsburgh, Atlanta (Allegheny County, GA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Zohorecruit is seeking a Sr Azure Architect to lead the design and implementation of our cloud environment across Azure landing zones, VNETs, and identity. The role focuses on security, compliance, and cost optimization, with hybrid work and travel between Pittsburgh and other US locations.

You will collaborate with AppDev, Infrastructure, and Pitt Digital teams, driving cloud-native design, DevOps pipelines, and modernization initiatives across hybrid environments.

Qualifications

• Experience designing cloud environments using Azure landing zones and VNETs.
• Ability to assess existing environments, create design documents, and outline risks.
• Familiarity with Java 21/25 and Spring 6 to understand app interactions with Azure services.

Responsibilities

• Lead and implement Azure architecture initiatives across AppDev, Infrastructure, and Pitt Digital groups.
• Design and deploy cloud-native applications using PaaS, containers, and IaC.
• Set up monitoring and observability across hybrid boundary for health and performance.
• Implement security controls, RBAC, Key Vault, Defender for Cloud, and cost governance.
• Migrate on-prem apps to Azure using Azure Migrate, App Service, VMs, and modernization approaches.
• Develop deployment pipelines in Azure DevOps and GitHub Actions for container-based deployments.

Skills

Azure architecture

Azure landing zones

Azure AD/Entra ID

Hybrid connectivity

Security best practices

Cost optimization

DevOps with Azure

CI/CD pipelines

IaC (ARM/Bicep/Terraform)

Azure Front Door

Tools

Azure DevOps

GitHub Actions

Terraform

Bicep

ARM templates

Azure Migrate

App Service

Azure Virtual Machines

ACA (Azure Container Apps)

Job description

Pittsburgh or Atlanta, United States |

Sr Azure Architect (infra + Azure migrate + Security / Compliance) - Hybrid with travel

We need help ensuring the cloud environment we require for application development is good.

Key pointers:

This person will be leading and implementing, and they will need to work with different groups (AppDev, Infrastructure, Pitt Digital) and ensure that the project is happening on time.

Azure Architecture & Design Expertise
Candidate needs to have a strong understanding of Azure landing zones, VNETs, identity (Azure AD / Entra ID), hybrid connectivity, security best practices, and cost optimization (Well‑Architected Framework). They will be responsible for setting up our cloud environment. To do this, they will need to

• Candidate will need to assess existing environments and create document designs
  
• Candidate will recommend a design after consulting with Developers and Infrastructure. The document will outline risks and dependencies, and how these will be addressed by the design
  
• Having familiarity with Java 21/25 and Spring 6 ecosystems is strongly encouraged because while we do not expect the consultant to code, they need to understand how these applications interact with Azure services (like Managed Identities, RBAC, and authentication)
  

Application Modernization & DevOps

• Candidate must have experience designing and deploying cloud‑native applications using PaaS services, containers, CI/CD pipelines (Azure DevOps/GitHub), and Infrastructure as Code (ARM/Bicep/Terraform/Azure Front Door).
  
• Candidate must have ability to implement deployment pipelines in Azure DevOps tailored for container-based deployments. Especially, DevOps experience using GitHub actions.
  
• Candidate must set up the environment to ensure that developers and infrastructure have ability to observe and monitor the environments, effectively troubleshoot application health and performance across the hybrid boundary
  

Security, Governance & Compliance

• Candidate must have knowledge of Azure security controls, RBAC, Key Vault, Defender for Cloud, monitoring/logging, and governance (policies, tagging, cost management) in regulated environments.
  
• Candidate must have experience implementing security per above protocols
  
• Candidate must have experience working with teams to implement firewall configurations for cloud within complex institutional networks
  
• Candidate needs to have hands‑on experience migrating on prem applications and infrastructure to Azure using services such as Azure Migrate, App Service, Azure Virtual Machines and modernization approaches.
  
• Candidate must also have containerization expertise with specific experience with Azure Container Apps (ACA) and Azure Static Web Apps.
  
• Candidate will implement the design and review with Developers and Infrastructure
  

Communication & Training

• Candidate will be responsible for creating help & training documentation
  
• Candidate will train infrastructure and developer teams on how to manage the environment