Azure Cloud Architect (1148643)

Location: Boston, MA

About the role

Hands-on Cloud Architect to lead the Cloud Migration architecture, design, implementation, and governance of enterprise-scale Azure and AWS environments. The candidate combines deep technical expertise in DevSecOps automation to host applications and data on the Azure cloud, with the ability to design secure, resilient, and compliant architectures aligned to enterprise standards.

Responsibilities

• Design and implement Infrastructure as Code (IaC) using Hashicorp Terraform Enterprise, ARM templates, and GitHub action pipelines for enterprise customers.
• Design, build, and manage DevSecOps pipelines with Harness and GitHub Actions.
• Design and implement solutions to host applications using services like AKS, ACA, ECS, EC2, Azure VM app services, and function apps on ASP/ASE, SWA, CDNs.
• Implement API management services, HashiCorp Vault integration, Entra ID, ForgeRock, gateways, WAFs, load balancers, message, event, and other communication components.
• Develop data solutions covering Azure SQL MI, Oracle Exadata, data lake, CosmosDB, Synapse analytics, Snowflake on Azure, etc.
• Implement Zero-Trust and defense-in-depth architectures using Azure RBAC, Entra IDs, MFA, managed identities, app registrations, etc.
• Implement encryption for data at rest and in transit, including mTLS.
• Conduct security testing such as DAST, penetration testing, and integrate Black Duck vulnerability scanning.
• Design and manage networking components including segmentation, routing, filtering, DNS, firewalls, proxies, and appliances.
• Integrate with enterprise certificate management and key management services like Hashicorp Vault.
• Design highly resilient architectures with cross-region disaster recovery capabilities at service and platform levels, meeting strict RTO/RPO targets.
• Design and implement cross-region active-active solutions spanning public cloud and on-premises.

Requirements

• Experience in both Azure and AWS migrations (preferred).
• Strong understanding of networking, including segmentation, routing, filtering, DNS, firewalls, proxies, and appliances.

Pay

$140,000.00 USD Annually - $145,000.00 USD Annually

Schedule: Full-time