Senior Azure Cloud Architect

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Designs, governs, and optimizes Cutsforth’s enterprise Azure cloud platform, establishing the landing zones, network topology, identity model, and security controls that support the company’s software and data products.

• Collaborates with software engineering, security, and operations teams to deliver scalable, secure, and cost-efficient cloud architecture that underpins Cutsforth’s connected monitoring and industrial product offerings.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience.

• 8-12 years of cloud engineering experience, including at least 5 years of architecting production Azure environments at an enterprise scale.

• Extensive knowledge of Azure Landing Zones and the Cloud Adoption Framework (CAF) Enterprise-Scale, encompassing management group hierarchy, subscription vending, and policy-driven governance.

• Mastery of Infrastructure as Code with Terraform (Azure Verified Modules) and/or Bicep, including the design of reusable modules, state management, and CI/CD-driven deployments.

• Significant experience in Azure networking: hub-and-spoke and Virtual WAN topologies, Azure Firewall Premium, Private Link/Private Endpoints, NSGs, UDRs, and hybrid connectivity (ExpressRoute, VPN Gateway).

• Practical experience with Azure Kubernetes Service (AKS), including cluster design, Azure CNI networking, workload identity, autoscaling, and GitOps (Flux/ArgoCD).

• Expertise in Microsoft Entra ID (Conditional Access, PIM, managed identities), Entra External ID for B2C/customer identity, and RBAC at scale.

• Hands-on knowledge of Azure security and compliance tools: Microsoft Defender for Cloud, Microsoft Sentinel (SIEM/SOAR), Azure Policy, Key Vault, and Defender for Containers/Servers.

• Experience in cost optimization and FinOps (reservations, savings plans, tagging strategy, chargeback/showback).

• Proficiency in observability with Azure Monitor, Log Analytics, Application Insights, and KQL.

• Capability to lead Azure Well-Architected Framework reviews across reliability, security, cost, operational excellence, and performance.

• Strong background in DevOps with GitHub Actions / Azure DevOps Pipelines, branch strategy, secrets management, and supply-chain security (SBOM, signed artifacts).

🏝️ Benefits

• Visa sponsorship is not available for this position.

• Home office.

• Corporate policies and safety protocols.