Azure Landing Zone Lead / Architect

Georgia Tek Systems

OH, OH(remote)

Apply

JOB DETAILS

SKILLS

Architectural Design, Best Practices, Business Operations, Cloud Computing, Communication Skills, Continuous Deployment/Delivery, Continuous Improvement, Continuous Integration, Cost Control, DevOps, Enterprise Architecture, Enterprise Protection, GitHub, Identity Data Management, Identity Federation, Microsoft Product Family, Microsoft Windows Azure, Network Topology, Onboarding, Protocol Independent Multicast (PIM), Scalable System Development, Software Administration, United States Department of Energy (DOE)

LOCATION

OH, OH

POSTED

10 days ago

Azure Landing Zone Lead / Architect
Location: Remote
Duration: Contract
Rate: DOE

Key Responsibilities

Lead the design, implementation, and evolution of Azure Landing Zones using Azure Landing Zone Accelerator (ALZ) and Terraform.
Design and deploy enterprise-scale management group hierarchies, subscription vending, and policy-as-code implementations.
Develop scalable Terraform modules for reusable infrastructure deployments.
Architect and implement hub-and-spoke Azure network topologies with centralized connectivity and secure workload isolation.
Design management group structures aligned with Microsoft's Cloud Adoption Framework (CAF), customized for enterprise governance requirements.
Establish Azure governance including:
- Azure Policies
- RBAC
- Resource organization
- Cost management
- Subscription governance
- Quota management
Implement Azure Entra ID security and identity solutions including:
- Conditional Access
- Privileged Identity Management (PIM)
- Service Principals
- Managed Identities
- Federated Identity
Build CI/CD pipelines for infrastructure deployments using Azure DevOps or GitHub Actions.
Manage Terraform state and infrastructure versioning following Infrastructure-as-Code best practices.
Design resilient deployment strategies including Blue/Green deployment models and zero-downtime workload transitions.
Partner with enterprise architects and infrastructure teams to convert architectural designs into production-ready Azure Landing Zone deployments.
Support onboarding of multiple application teams while continuously improving and hardening the landing zone.

Required Qualifications

Extensive experience designing and deploying Azure Landing Zones using Azure Landing Zone Accelerator (ALZ).
Strong hands-on expertise with Terraform, including:
- Module development
- State management
- Infrastructure-as-Code best practices
Experience designing enterprise Azure governance frameworks.
Deep knowledge of Microsoft Cloud Adoption Framework (CAF).
Expertise building customized management group hierarchies beyond CAF defaults.
Strong Azure networking experience including:
- Hub-and-spoke architecture
- Centralized connectivity
- Private networking
- VNet peering
- Secure egress architecture
Experience with Azure subscription lifecycle management and enterprise governance.
Strong knowledge of Azure Entra ID including:
- RBAC
- Conditional Access
- PIM
- Managed Identities
- Service Principals
- Federated Identity
Experience integrating Terraform deployments into Azure DevOps or GitHub Actions CI/CD pipelines.
Strong understanding of enterprise security, governance, compliance, and operational best practices.
Excellent communication skills with the ability to work directly with enterprise architecture and infrastructure teams.

About the Company

Georgia Tek Systems

Resume Resources

Free Resume Templates Free Resume Builder