Job Description :

Role Summary :

We are seeking a senior Cloud Solutions Architect to own the end-to-end design of secure, compliant, enterprise-scale Azure Landing Zones and lead cloud migration programs into them. You will translate business, security, and regulatory requirements into a target-state architecture aligned to the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF), drive delivery through automation and Infrastructure-as-Code and provide design leadership to platform and workload engineering teams across a multi-subscription estate.

Key Responsibilities :

- Architect enterprise-scale Azure Landing Zones using the CAF ALZ accelerator : management group hierarchy, subscription topology, RBAC, policy-driven governance, and the platform vs. application landing-zone model.

- Apply the Well-Architected Framework (WAF) pillars : reliability, security, cost optimization, operational excellence, and performance efficiency to all designs and design reviews.

- Lead cloud migration strategy and delivery : discovery, assessment, dependency mapping, business-case/TCO, wave planning, and the 6 Rs disposition : rehost, replatform, refactor, repurchase, retire, and retain.

- Drive migrations end-to-end using Azure Migrate and complementary tooling, including Azure Site Recovery (ASR), Database Migration Service (DMS), Data Migration Assistant (DMA), Storage Migration Service, AzCopy, Movere, and partner tools as appropriate.

- Own automation and Infrastructure-as-Code as the delivery standard, using Terraform and Bicep for platform and workload provisioning, and PowerShell for tooling, configuration, bulk operations, and migration/runbook automation.

- Design and govern CI/CD pipelines with Azure DevOps and/or GitHub Actions, including automated governance, drift detection, monitoring, and remediation.

- Define the subscription vending approach for onboarding new and migrated workloads consistently at scale.

- Design identity and access architecture with Microsoft Entra ID, PIM, Conditional Access, and managed identities.

- Establish governance and compliance guardrails with Azure Policy initiatives at scale, management groups, and Microsoft Defender for Cloud.

- Drive cost management, tagging, budgeting, and FinOps practices, including post-migration optimization.

- Partner with the Network Architect on the connectivity landing zone : Hub-Spoke / Virtual WAN, and with security teams on zero-trust.

- Author ADRs, HLDs/LLDs, and migration runbooks; present designs to architecture review boards and executive stakeholders.

- Provide technical leadership, design assurance, and mentoring to engineering teams.

Required Skills & Experience :

- 10+ years in cloud/solution architecture, with 5+ years designing and delivering Azure at enterprise scale.

- Proven, hands-on expertise with the Cloud Adoption Framework (CAF), Well-Architected Framework (WAF), and Azure Landing Zones.

- Demonstrated migration experience, leading large-scale on-prem-to-Azure and/or cloud-to-cloud migrations across infrastructure, databases, and applications.

- Hands-on with Azure Migrate and broader migration tooling : ASR, DMS, DMA, Storage Migration Service, and AzCopy.

- Strong automation and IaC skills : Terraform, Bicep, and PowerShell, plus DevOps automation with Azure DevOps / GitHub Actions.

- Strong experience with Azure core platform components, including Arc, Backup, Migrate, networking, and security.

- Deep knowledge of identity, governance, and security, including Entra ID, PIM, Azure Policy, and Defender for Cloud.

- Familiarity with compliance frameworks, including ISO 27001, CIS, SOC 2, and NIST.

- Excellent stakeholder management, documentation, and presentation skills.

Preferred Qualifications :

- Microsoft Certified : Azure Solutions Architect Expert (AZ-305).

- AZ-104, AZ-500 Security, and/or AZ-400 DevOps certification.

- HashiCorp Terraform Associate certification.

- Experience with migration accelerators or the Azure Migration and Modernization Program (AMMP).

- Multi-cloud or hybrid experience, including Azure Arc and on-prem integration.

- TOGAF or equivalent enterprise architecture credential.