Senior Azure Architect

DataSpring

18h•$160,000 - $185,000•Remote

About The Position

As a Senior Azure Architect, you will lead the design of DataSpring's Azure platform, including landing zones, networking, identity, resilience, and governance for healthcare data products. DataSpring operates production Azure platforms that handle protected health information for health plans and providers nationwide, and is bringing more of their design and operation in-house from vendors. You will shape Azure standards, review vendor designs against them, and stay hands-on to validate designs before adoption. The role leads architecture for Azure platforms and initiatives, contributes to target-state architecture, and establishes standards through Azure Policy, reference architectures, and reusable infrastructure-as-code modules. It also covers resilient multi-region and disaster recovery patterns, network architecture, security and compliance, FinOps, platform foundations for AI workloads, and observability. The architect serves as an escalation point for complex Azure incidents, mentors engineers, documents architecture decisions and diagrams, and reports weekly status to designated DataSpring management. This is a full-time, remote, exempt position reporting to the Director, Enterprise Architecture & Infrastructure.

Requirements

Deep, hands-on expertise in Azure architecture, including landing zones, management groups and subscriptions, Azure Policy, and the Cloud Adoption and Well-Architected Frameworks.
Strong Azure networking expertise, including hub-and-spoke and Virtual WAN, Private Link, Azure DNS, Application Gateway and Front Door, Azure Firewall, and hybrid connectivity.
Proven design experience for multi-region, highly available, and disaster recovery architectures for PaaS and container workloads, including App Service, AKS, Azure SQL, Cosmos DB, and Storage.
Identity architecture experience with Microsoft Entra ID across multiple tenants, including managed identities, RBAC, Conditional Access, and privileged access.
Terraform experience is required; ability to write and review infrastructure-as-code modules and CI/CD for infrastructure. Bicep is a plus.
Cloud security experience in a regulated environment, including encryption, key management, logging, and defense in depth.
FinOps practice, including reading Azure cost data, forecasting spend, and designing for cost.
Ability to explain design trade-offs clearly to engineers, vendors, and executives and challenge vendor designs with evidence.
Demonstrated use of AI coding assistants such as Claude Code or Cursor to accelerate design, infrastructure as code, and analysis.
At least 8 years in infrastructure or cloud engineering, including at least 5 years designing enterprise-scale Azure environments as a cloud or solutions architect.
Experience leading a production Azure landing zone or platform design, including a tested disaster recovery design.
Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field, or an equivalent combination of education and experience.

Nice To Haves

Healthcare or other regulated-industry experience, including HIPAA, SOC 2, or HITRUST.
Experience directing vendor or managed-service delivery teams.
Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
Azure networking or security specialty certifications.
Familiarity with Agile, Scrum, or SAFe delivery.
Bicep experience.

Responsibilities

Lead Azure platform and initiative architecture, contributing to target-state architecture, including landing zones, management group and subscription design, hub-and-spoke networking, and shared services.
Recommend availability, recovery time, and recovery point targets; design and regularly test multi-region and disaster recovery patterns at reasonable cost.
Develop and apply Azure standards using Azure Policy, reference architectures, and reusable infrastructure-as-code modules.
Review implementation vendor and partner-team designs before build, recommend approval, and ensure delivery follows agreed standards.
Lead network architecture across private, edge, and global traffic management; maintain DNS, hybrid connectivity, and zero-trust network security and segmentation across projects and environments.
Partner with Information Security to meet HIPAA, SOC 2, and HITRUST requirements, including controls for PHI, identity and access, encryption, and logging.
Manage cloud costs for assigned projects within approved budgets through tagging and showback, right-sizing, reservations and savings plans, and cost-conscious architecture.
Design platform foundations for AI workloads, including Azure OpenAI and AI Foundry capacity, gateways, and secure access patterns.
Implement and improve observability practices using LGTM, OpenTelemetry, Azure Monitor, Log Analytics, and Application Insights.
Serve as an escalation point for complex Azure incidents and lead subsequent design fixes.
Mentor engineers on the Architecture and Infrastructure team and improve the team's Azure design skills.
Document architecture decisions and maintain current-state and target-state diagrams.
Report weekly status on architecture initiatives to designated DataSpring management.
Follow all DataSpring Policies and Procedures.