Azure Cloud Architect

Azure Architecture & Platform Engineering

• Architect enterprise-scale Azure Landing Zones aligned to CAF and Well-Architected principles: management groups, subscriptions, Azure Policy, RBAC, and platform automation.
• Define compute and PaaS patterns: VM/VMSS sizing, AKS, App Service/Functions, and Container Registry as appropriate.
• Architect Azure Virtual Desktop solutions: host pool design, FSLogix profile strategy on Azure Files or Azure NetApp Files, Scaling Plans, and AVD Insights monitoring.

Azure Migration

• Lead cloud migration programs across a range of scenarios: on-premises-to-Azure, cloud-to-cloud (e.g., AWS to Azure), and application modernization and refactoring efforts.
• Drive discovery and assessment: dependency mapping, workload inventory, rehost/replatform/refactor recommendations, and wave planning.
• Manage cutover execution and hypercare: tooling selection, replication monitoring, test migrations, rollback procedures, and stakeholder communication throughout.

Identity & Security

• Architect Zero Trust models with Microsoft Entra ID: Conditional Access, PIM role patterns, hybrid identity (Entra Connect/Cloud Sync), and app registration governance.
• Define security blueprints: Azure Policy, Defender for Cloud, Microsoft Sentinel, Defender XDR integrations, and Key Vault design.
• Map controls to compliance frameworks (ISO 27001, SOC 2, HIPAA, PCI-DSS as applicable) and drive Secure Score improvements.

Automation, IaC & CI/CD

• Build modular IaC frameworks in Terraform and/or Bicep: reusable landing zone modules, policy-as-code, and coding standards for delivery teams.
• Design CI/CD pipelines in Azure DevOps and/or GitHub Actions: environment gates, drift detection, and pre-deployment compliance checks.
• Author automation in PowerShell, Azure CLI, and Python: bootstrap scripts, governance tooling, and operational runbooks.

Observability, Resilience & FinOps

• Design observability platforms: Log Analytics workspace architecture, Azure Monitor, Workbook/dashboard frameworks, and alerting.
• Architect BCDR solutions with Azure Backup, Site Recovery, and cross-region topologies; validate against RTO/RPO targets.
• Lead FinOps efforts: tagging standards, Cost Management reporting, reservation/Savings Plans strategy, and optimization roadmaps.

Consulting & Client Engagement

• Lead discovery workshops, design sessions, and Well-Architected Reviews; present architecture options with clear trade-offs to technical and business stakeholders.
• Stay hands-on throughout delivery: validate designs through working code and demonstrate patterns directly alongside client teams.
• Mentor delivery engineers through design reviews, pairing on complex problems, and code reviews.

Additional Skills

• Strong Azure networking fundamentals: hub-and-spoke or Virtual WAN, Azure Firewall, Application Gateway/WAF, Private Link, and ExpressRoute/VPN.
• Microsoft Entra ID experience: Conditional Access, PIM, hybrid identity, and Zero Trust concepts.
• Familiarity with Azure security services: Defender for Cloud, Microsoft Sentinel, Key Vault, and compliance frameworks.
• AVD experience: host pool design, FSLogix profiles, Scaling Plans, and monitoring.
• Proficiency in PowerShell and Azure CLI; Python is a plus.
• Strong analytical, problem-solving, and troubleshooting skills.
• Excellent written, verbal, and presentation skills.
• Strong client-facing skills, empathy, and the ability to guide clients through complex technical challenges.
• Ability to work independently, take ownership, and translate goals into actionable outcomes.