Azure Application Engineering Lead

This is a fully remote position, open to applicants in New York.

📋 Description

• Take ownership of the architecture for intricate Microsoft Azure projects from the initial discovery phase to implementation.

• Convert both business and technical requirements into secure and scalable solutions.

• Design enterprise-level Azure Landing Zones in accordance with the Cloud Adoption Framework and Well-Architected principles.

• Lead extensive cloud migration and modernization initiatives through stages including discovery, assessment, migration planning, cutover, stabilization, and hypercare.

• Architect Azure platform and application patterns across areas such as compute, networking, security, identity, storage, and application services.

• Develop Zero Trust identity and security solutions while aligning controls with compliance frameworks.

• Create reusable Infrastructure as Code and automation patterns using Terraform and/or Bicep, Azure DevOps and/or GitHub Actions, PowerShell, Azure CLI, and Python.

• Design solutions for observability, resilience, and FinOps, which encompass RTO/RPO validation, tagging standards, reservation and Savings Plans strategies, and optimization roadmaps.

• Facilitate client discovery workshops, design sessions, Well-Architected Reviews, proof-of-concept builds, and Architecture Decision Records.

• Present architectural alternatives and trade-offs to both technical and business stakeholders.

• Mentor engineers through design reviews, collaborative sessions, and code evaluations.

• Support pre-sales activities through solution scoping, proposal development, SOW definition, and engagement estimates.

• Address escalated technical challenges and work together with clients and delivery teams.

⛳️ Requirements

• Over 8 years of practical experience in architecting and delivering Azure solutions that span networking, compute, storage, identity, and security.

• Demonstrated success in delivering enterprise Azure Landing Zones with management group design, Azure Policy, RBAC frameworks, and platform automation.

• Proven ability to lead Azure migration initiatives, including on-premises, cloud-to-cloud, or application modernization projects, with accountability for assessment, wave planning, cutover, and stabilization.

• Strong experience with Infrastructure as Code using Terraform and/or Bicep.

• Experience in CI/CD processes with Azure DevOps or GitHub Actions.

• Proficient in PowerShell and Azure CLI.

• In-depth knowledge of Azure networking, including hub-and-spoke or Virtual WAN architectures, Azure Firewall, Application Gateway/WAF, Private Link, and ExpressRoute/VPN.

• Familiar with Microsoft Entra ID, Conditional Access, PIM, hybrid identity, and Zero Trust principles.

• Knowledge of Defender for Cloud, Microsoft Sentinel, Key Vault, and relevant compliance frameworks.

• Experience with Azure Virtual Desktop, including host pool design, FSLogix profiles, Scaling Plans, and monitoring.

• Strong analytical, problem-solving, and troubleshooting capabilities.

• Exceptional written, verbal, presentation, and client-facing communication skills.

• Ability to work independently, assume ownership, and turn complex objectives into actionable results.

• Preferred experience with tenant-to-tenant Microsoft 365 migrations, Intune, Exchange Online, SharePoint/OneDrive, Teams, Purview, Copilot readiness and governance, Copilot Studio, Microsoft Foundry, AKS/Kubernetes, cloud data platforms, and pre-sales or consulting delivery.

• Preferred Microsoft certifications such as AZ-305, AZ-104, AZ-500, SC-100, AZ-400, AZ-700, and Microsoft 365 certifications.

🏝️ Benefits

• Performance-based bonus.

• Unlimited paid time off.

• Flexible and affordable benefits program.

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Flexible spending accounts.

• Health reimbursement account.

• 401(k) plan with a company match.