Sr Azure Architect (infra + Azure migrate + Security / Compliance)- Hybrid

Simple Solutions•Pittsburgh, PA

3d•Hybrid

About The Position

We need help ensuring the cloud environment we require for application development is good. Key pointers: This person will be leading and implementing, and they will need to work with different groups (AppDev, Infrastructure, Pitt Digital) and ensure that the project is happening on time. Azure Architecture & Design Expertise Candidate needs to have a strong understanding of Azure landing zones, VNETs, identity (Azure AD / Entra ID), hybrid connectivity, security best practices, and cost optimization (Well‑Architected Framework). They will be responsible for setting up our cloud environment. To do this, they will need to Candidate will need to assess existing environments and create document designs Candidate will recommend a design after consulting with Developers and Infrastructure. The document will outline risks and dependencies, and how these will be addressed by the design Having familiarity with Java 21/25 and Spring 6 ecosystems is strongly encouraged because while we do not expect the consultant to code, they need to understand how these applications interact with Azure services (like Managed Identities, RBAC, and authentication) Application Modernization & DevOps Candidate must have experience designing and deploying cloud‑native applications using PaaS services, containers, CI/CD pipelines (Azure DevOps/GitHub), and Infrastructure as Code (ARM/Bicep/Terraform/Azure Front Door). Candidate must have ability to implement deployment pipelines in Azure DevOps tailored for container-based deployments. Especially, DevOps experience using GitHub actions. Candidate must set up the environment to ensure that developers and infrastructure have ability to observe and monitor the environments, effectively troubleshoot application health and performance across the hybrid boundary Security, Governance & Compliance Candidate must have knowledge of Azure security controls, RBAC, Key Vault, Defender for Cloud, monitoring/logging, and governance (policies, tagging, cost management) in regulated environments. Candidate must have experience implementing security per above protocols Candidate must have experience working with teams to implement firewall configurations for cloud within complex institutional networks Proven Azure Migration Experience Candidate needs to have hands-on experience migrating on prem applications and infrastructure to Azure using services such as Azure Migrate, App Service, Azure Virtual Machines and modernization approaches. Candidate must also have containerization expertise with specific experience with Azure Container Apps (ACA) and Azure Static Web Apps. Candidate will implement the design and review with Developers and Infrastructure Communication & Training Candidate will be responsible for creating help & training documentation Candidate will train infrastructure and developer teams on how to manage the environment

Requirements

Strong understanding of Azure landing zones, VNETs, identity (Azure AD / Entra ID), hybrid connectivity, security best practices, and cost optimization (Well‑Architected Framework)
Experience designing and deploying cloud‑native applications using PaaS services, containers, CI/CD pipelines (Azure DevOps/GitHub), and Infrastructure as Code (ARM/Bicep/Terraform/Azure Front Door)
Ability to implement deployment pipelines in Azure DevOps tailored for container-based deployments
Knowledge of Azure security controls, RBAC, Key Vault, Defender for Cloud, monitoring/logging, and governance (policies, tagging, cost management) in regulated environments
Experience implementing security per above protocols
Experience working with teams to implement firewall configurations for cloud within complex institutional networks
Hands-on experience migrating on prem applications and infrastructure to Azure using services such as Azure Migrate, App Service, Azure Virtual Machines and modernization approaches
Containerization expertise with specific experience with Azure Container Apps (ACA) and Azure Static Web Apps

Nice To Haves

Familiarity with Java 21/25 and Spring 6 ecosystems

Responsibilities

Leading and implementing cloud environment setup
Working with different groups (AppDev, Infrastructure, Pitt Digital) to ensure project timelines
Assessing existing environments and creating document designs
Recommending designs after consulting with Developers and Infrastructure
Designing and deploying cloud‑native applications using PaaS services, containers, CI/CD pipelines (Azure DevOps/GitHub), and Infrastructure as Code (ARM/Bicep/Terraform/Azure Front Door)
Implementing deployment pipelines in Azure DevOps tailored for container-based deployments
Setting up the environment to ensure developers and infrastructure can observe and monitor environments
Implementing security protocols
Implementing firewall configurations for cloud within complex institutional networks
Migrating on prem applications and infrastructure to Azure
Implementing designs and reviewing with Developers and Infrastructure
Creating help & training documentation
Training infrastructure and developer teams on how to manage the environment