Cloud Solutions Architect

Role & responsibilities

Cloud Solutions Architect

Role Summary

We are seeking a senior Cloud Solutions Architect to own the end-to-end design of secure, compliant, enterprise-scale Azure Landing Zones and lead cloud migration programs into them. You will translate business, security, and regulatory requirements into a target-state architecture aligned to the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework (WAF), drive delivery through automation and Infrastructure-as-Code and provide design leadership to platform and workload engineering teams across a multi-subscription estate.

Key Responsibilities

• Architect enterprise-scale Azure Landing Zones using the CAF ALZ accelerator: management group hierarchy, subscription topology, RBAC, policy-driven governance, and the platform vs. application landing-zone model.
• Apply the Well-Architected Framework (WAF) pillars: reliability, security, cost optimization, operational excellence, and performance efficiency to all designs and design reviews.
• Lead cloud migration strategy and delivery: discovery, assessment, dependency mapping, business-case/TCO, wave planning, and the 6 Rs disposition: rehost, replatform, refactor, repurchase, retire, and retain.
• Drive migrations end-to-end using Azure Migrate and complementary tooling, including Azure Site Recovery (ASR), Database Migration Service (DMS), Data Migration Assistant (DMA), Storage Migration Service, AzCopy, Movere, and partner tools as appropriate.
• Own automation and Infrastructure-as-Code as the delivery standard, using Terraform and Bicep for platform and workload provisioning, and PowerShell for tooling, configuration, bulk operations, and migration/runbook automation.
• Design and govern CI/CD pipelines with Azure DevOps and/or GitHub Actions, including automated governance, drift detection, monitoring, and remediation.
• Define the subscription vending approach for onboarding new and migrated workloads consistently at scale.
• Design identity and access architecture with Microsoft Entra ID, PIM, Conditional Access, and managed identities.
• Establish governance and compliance guardrails with Azure Policy initiatives at scale, management groups, and Microsoft Defender for Cloud.
• Drive cost management, tagging, budgeting, and FinOps practices, including post-migration optimization.
• Partner with the Network Architect on the connectivity landing zone: Hub-Spoke / Virtual WAN, and with security teams on zero-trust.
• Author ADRs, HLDs/LLDs, and migration runbooks; present designs to architecture review boards and executive stakeholders.
• Provide technical leadership, design assurance, and mentoring to engineering teams.

Required Skills & Experience

• 10+ years in cloud/solution architecture, with 5+ years designing and delivering Azure at enterprise scale.
• Proven, hands-on expertise with the Cloud Adoption Framework (CAF), Well-Architected Framework (WAF), and Azure Landing Zones.
• Demonstrated migration experience, leading large-scale on-prem-to-Azure and/or cloud-to-cloud migrations across infrastructure, databases, and applications.
• Hands-on with Azure Migrate and broader migration tooling: ASR, DMS, DMA, Storage Migration Service, and AzCopy.
• Strong automation and IaC skills: Terraform, Bicep, and PowerShell, plus DevOps automation with Azure DevOps / GitHub Actions.
• Strong experience with Azure core platform components, including Arc, Backup, Migrate, networking, and security.
• Deep knowledge of identity, governance, and security, including Entra ID, PIM, Azure Policy, and Defender for Cloud.
• Familiarity with compliance frameworks, including ISO 27001, CIS, SOC 2, and NIST.
• Excellent stakeholder management, documentation, and presentation skills.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
• AZ-104, AZ-500 Security, and/or AZ-400 DevOps certification.
• HashiCorp Terraform Associate certification.
• Experience with migration accelerators or the Azure Migration and Modernization Program (AMMP).
• Multi-cloud or hybrid experience, including Azure Arc and on-prem integration.
• TOGAF or equivalent enterprise architecture credential.