The Lead Azure Cloud Solutions Architect will own the end-to-end design, governance, and delivery of enterprise Azure solutions. This role requires strong leadership and deep technical expertise across Identity & Access Management, Cloud Infrastructure, Data Platforms, Application Architecture, Security, Governance, and Enterprise Landing Zones.

The architect will lead cloud adoption and migration initiatives from on-premises and non-Azure platforms to Microsoft Azure, applying Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF) principles to ensure secure, scalable, compliant, and cost-optimized solutions. This role acts as the technical authority and trusted advisor for customers and internal teams.

Key Responsibilities

- Design and implement scalable, secure, resilient, and cost-efficient Azure architectures across IaaS, PaaS, and SaaS workloads.

- Lead end-to-end cloud architecture ownership across Identity & Access Management, Networking, Security, Data Platforms, Applications, and Cloud Infrastructure.

- Develop high-level and low-level architecture designs including network topology, identity models, security controls, data architecture, and workload placement.

- Architect and govern enterprise-scale Azure Landing Zones, including management group hierarchy, subscription strategy, environment segregation, and policy-driven governance.

- Apply Azure Cloud Adoption Framework (CAF) to define cloud strategy, readiness, governance, and adoption roadmaps.

- Conduct Azure Well-Architected Framework (WAF) reviews across Reliability, Security, Performance Efficiency, Cost Optimization, and Operational Excellence.

- Define reference architectures, design standards, and migration blueprints aligned with enterprise and regulatory requirements.

- Design and implement identity and access management using Microsoft Entra ID (Azure AD), RBAC, Conditional Access, and Privileged Identity Management (PIM).

- Architect Zero Trust security models and secure access patterns across users, applications, and workloads.

- Design and implement Azure security architecture using Defender for Cloud, Key Vault, Azure Firewall, NSGs, ASGs, Private Endpoints, and network segmentation.

- Enforce governance, security, compliance, and regulatory controls using Azure Policy, RBAC, tagging standards, and policy initiatives.

- Conduct risk assessments, threat modeling, and security architecture reviews for Azure environments.

- Design and govern hybrid and multi-cloud connectivity using ExpressRoute, Site-to-Site / Point-to-Site VPN, DNS, and vWAN architectures.

- Deploy and govern Azure resources including Virtual Machines, App Services, AKS, Container Apps, VNets, Load Balancers, Application Gateways, and API Management.

- Architect and guide data platforms and databases including Azure SQL, SQL Managed Instance, PostgreSQL, Cosmos DB, and analytics services.

- Ensure backup, disaster recovery, and business continuity using Azure Backup, Azure Site Recovery, and region-resilient architectures.

- Lead cloud assessments, discovery workshops, and migration programs from on-premises, AWS, GCP, or legacy platforms to Azure.

- Define and execute migration and modernization strategies (rehost, replatform, refactor, retire).

- Utilize Azure Migrate, Database Migration Service, and partner tools for structured and low-risk workload transitions.

- Modernize legacy applications using Azure PaaS, containers, microservices, and DevOps best practices.

- Design and implement Infrastructure-as-Code (IaC) using ARM templates, Bicep, or Terraform to ensure repeatable and compliant deployments.

- Collaborate with DevOps teams to design and enable CI/CD pipelines using Azure DevOps and GitHub Actions.

- Drive automation, standardization, and operational consistency across environments.

- Design and implement monitoring, logging, and observability using Azure Monitor, Log Analytics, and Application Insights.

- Define and execute cost management and FinOps strategies, including budgeting, tagging, chargeback/showback, and spend optimization.

- Monitor and continuously optimize Azure costs and performance using Cost Management + Billing insights.

- Act as a trusted technical advisor and architectural authority for stakeholders, customers, and delivery teams.

- Work closely with business stakeholders, developers, operations, security, and compliance teams to align cloud architecture with business objectives.

- Mentor and guide architects, engineers, and delivery teams on Azure best practices and enterprise standards.

- Prepare and present architecture reviews, design documents, assessment reports, and solution proposals to technical and executive audiences.

Required Skills & Qualifications

Core Technical Skills

- Microsoft Azure Compute, Networking, Storage, Identity, Security, Monitoring.

- Enterprise Azure Landing Zones & subscription governance.

- Microsoft Entra ID, RBAC, Conditional Access, PIM.

- Azure Security Defender for Cloud, Firewall, NSGs, Key Vault.

- Infrastructure-as-Code ARM, Bicep, Terraform.

- DevOps & Automation Azure DevOps, GitHub Actions.

Experience

- Proven experience as a Cloud / Solutions Architect leading enterprise Azure implementations.