Manager, Cloud Architecture

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Implement the enterprise cloud strategy (primarily Azure, with a multi-cloud perspective) across IaaS, PaaS, SaaS, and hybrid environments, ensuring the team adheres to architectural standards established by the Director.

• Take ownership of daily Azure operations — including compute, storage, networking, identity, and cost governance — with complete accountability for platform health and adherence to SLAs.

• Lead the execution of FinOps: monitor cloud expenditures, enforce tagging and cost allocation standards, identify and deliver optimization goals, and report performance metrics to the Director.

• Manage the SaaS portfolio operationally — ensuring secure integrations, governance to standards, and current lifecycle management.

• Promote automation within the team to reduce manual effort, accelerate delivery, and enhance operational consistency.

• Oversee server, storage, and virtualization environments — managing compute lifecycle, hypervisor platforms, SAN/NAS/object storage — to meet capacity, performance, and resilience standards.

• Supervise endpoint and profile engineering, including Okta administration and access management, ensuring adherence to identity hygiene and least-privilege principles.

• Guide the team’s efforts in high availability and disaster recovery capabilities — coordinating DR tests, maintaining runbooks, and ensuring documentation is audit-ready as per HIPAA contingency plan requirements.

• Collaborate with network engineering colleagues to ensure seamless integration of cloud and infrastructure architecture with WAN/LAN and Zero Trust initiatives.

• Direct IAM engineering operations — including provisioning, deprovisioning, role-based access control, and privileged access management — to ensure compliance with HIPAA, HITRUST, and internal governance standards.

• Govern operations of the Okta platform: SSO, MFA, lifecycle management, and integration with enterprise applications.

• Work closely with InfoSec to ensure that identity and access controls are current, auditable, and aligned with the organization’s Zero Trust architectural direction.

• Lead, develop, and retain a high-performing team of six to seven engineers across systems, network, and identity disciplines — setting clear expectations, coaching for growth, and proactively managing performance.

• Establish and maintain operational processes: incident management, change control, problem management, and capacity planning — all based on ITSM best practices.

• Maintain enterprise monitoring and observability standards across infrastructure domains, ensuring proactive operations with full visibility into platform health.

• Support vendor and partner management at the operational level — holding providers accountable to SLAs and escalating contract or performance issues to the Director.

• Collaborate with cross-functional IT teams and business stakeholders as a trusted execution partner, clearly communicating platform status, risks, and roadmaps without jargon.

• Carry out other related duties as assigned.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Network Administration, or a related field.

• Over 5 years of experience in cloud infrastructure, systems engineering, or network engineering — including at least 2 years in a leadership or managerial role.

• Practical Azure expertise — covering compute, storage, networking, identity, and cost management — with the ability to evaluate architectural proposals, assess risks, and hold engineers accountable to design standards.

• Demonstrated experience managing identity and access environments, including Okta (SSO, MFA, lifecycle management) and enterprise IAM/PAM programs.

• Experience with server and virtualization platforms (VMware/Hyper-V), SAN/NAS storage, and data center operations.

• Working knowledge of network engineering principles — enough to collaborate with network engineers on cloud connectivity, segmentation, and Zero Trust integration.

• Proven ability to lead DR/BC execution — including test programs, runbook management, and RTO/RPO validation — in a HIPAA-regulated environment.

• Practical experience in FinOps: monitoring cloud costs, enforcing tagging, rightsizing, and accountability in spending reporting.

• Direct experience in a HIPAA-regulated healthcare environment; familiarity with HITRUST CSF and the necessary infrastructure controls for audit compliance.

• Strong leadership skills — focused on coaching, performance management, and fostering a culture of team accountability.

• Effective communicator: capable of translating technical complexity into clear, outcome-oriented language for stakeholders and leadership.

🏝️ Benefits

• Health insurance

• Retirement plans

• Paid time off

• Professional development opportunities

• Remote work options