Solution Architect, Cloud Tenants

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and take charge of the future DX Cloud Tenant Infrastructure that hosts a healthcare software platform, adhering to regulatory and certification standards.

• Engage with the Site and Support Operations team to implement its leadership strategy.

• Oversee the architecture and operation of all cloud-based tenants for the infrastructure division.

• Manage tenants with delegated rights and facilitate the staged rollout of tenant-wide changes.

• Operate subscription vending as an unattended pipeline while overseeing downstream reporting.

• Generate operating evidence for ISO 27001, SOC 2, and HITRUST certifications, and assist during audits.

• Execute infrastructure qualifications and verify tenant automation alongside quality and regulatory functions.

• Lead, mentor, and enhance the skills of architects and engineers on tenant build and management best practices.

• Provide monthly reports on tenant-service metrics, which include data volumes, user counts, service availability, security posture, policy compliance, exemptions, privileged-access activities, subscriptions vended, and limit management.

• Educate teams on appropriate Change Management and Demand processes pertaining to cloud tenants.

• Offer escalation support for significant incidents affecting infrastructure services at DX sites.

• Oversee projects and provide technical guidance on critical DX infrastructure initiatives.

• Cultivate relationships with IT service owners in Global Infrastructure.

• Collaborate with Site Management Infrastructure and Onsite Support teams for knowledge sharing and issue reporting.

• Team up with global Cybersecurity teams, including Microsoft Sentinel integration, while ensuring the separation of build, operation, and detection duties.

• Deliver a tenant equipped with a policy baseline, unattended subscription vending, absence of standing administrative rights, and a completed initial certification assessment.

⛳️ Requirements

• A Bachelor’s degree or equivalent experience is mandatory.

• A minimum of 8-10 years of experience in IT Architecture within Cloud environments or in comparable technical and leadership roles.

• At least three years of experience in building or operating Azure governance at scale, covering MS Entra, Management groups, Azure Policy, and Infrastructure as Code (IaC).

• Experience in a regulated industry where controls undergo assessment by independent auditors.

• Willingness to travel up to 20% of the time.

• Exceptional written, verbal, and presentation communication skills, adept at translating IT and business requirements.

• L3/L4 technical problem-solving skills and subject matter expertise in IT infrastructure and IT support.

• Proven effectiveness in global, multi-cultural team environments.

• Broad knowledge of SHS IT strategy, industry standards, and the current SHS IT landscape.

• Profound understanding and experience in IT solution design, implementation, and troubleshooting.

• Strong professional judgment and problem-solving abilities.

• Expertise in Microsoft Azure and Microsoft Entra ID.

• Familiarity with AWS or GCP is advantageous.

• Experience with complex identity federation, RBAC, and tenant-level isolation boundaries.

• Proficient in Infrastructure as Code using HashiCorp Terraform and Bicep with pipelines and staged rollout.

• Knowledge of network architecture, including secure VPCs, tenant network isolation, private links, cross-tenant connectivity, hub and spoke topologies, private DNS, and private endpoints.

• Experience with Azure Policy at scale, including initiatives, exemptions, remediation, and compliance reporting.

• Compliance knowledge regarding GDPR, HIPAA, SOC 2, ISO 27001, and HITRUST.

• Familiarity with Azure Monitor, Log Analytics, Sentinel, and Defender for Cloud.

• Understanding of tenant-specific billing, cost allocation tags, and resource optimization strategies.

• Experience onboarding multiple AKS clusters to policy and identity within an Azure environment.

• Willingness and capability to work with controlled technology in compliance with US export control laws.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• 401(k) retirement plan

• Life insurance

• Long-term and short-term disability insurance

• Paid parking/public transportation

• Paid time off

• Paid sick and safe time

• Flexible and dynamic work environment

• Opportunities to step outside your comfort zone for personal and professional growth