Sr. Azure Cloud Architect

KLA•Milpitas, CA

7d•$137,800 - $234,300

About The Position

KLA is seeking a hands-on Senior Azure Cloud Architect to join its Cloud & AI Platform organization. The role designs, implements, secures, and optimizes enterprise solutions on Microsoft Azure while supporting hybrid integration with on-premises infrastructure and other cloud platforms. The architect combines Azure architecture expertise with practical engineering across cloud networking, identity, security, automation, platform services, Kubernetes, monitoring, and cost optimization. The architect works with Infrastructure, Cybersecurity, Application Development, Data, Engineering, and Business teams to deliver scalable, resilient, secure, and supportable cloud solutions. The position also provides technical guidance and knowledge transfer while remaining directly involved in implementation and issue resolution.

Requirements

Bachelor's degree in computer science, Computer Engineering, Information Technology, or a related field, with eight years of related experience; or a master's degree with five years of related experience.
Five years of hands-on Microsoft Azure architecture or engineering experience supporting enterprise production environments.
Strong experience with Azure IaaS and PaaS services, cloud networking, identity, security, governance, monitoring, and operational support.
Hands-on experience with Azure landing zones, Azure Policy, RBAC, Microsoft Entra ID, Private Link, ExpressRoute or VPN connectivity, and Azure security services.
Experience troubleshooting complex Azure infrastructure, networking, identity, security, deployment, and application-connectivity issues.
Understanding of cloud security principles including encryption, key management, secrets management, network segmentation, logging, least privilege, and Zero Trust.
Knowledge of cloud governance, observability, business continuity, disaster recovery, cost management, and operational excellence.
Strong written and verbal communication skills, with the ability to produce clear technical documentation and collaborate across teams.

Responsibilities

Design, implement, and support scalable, highly available, resilient, and secure solutions using Microsoft Azure IaaS and PaaS services.
Design and maintain Azure landing-zone capabilities, including management-group and subscription organization, Azure Policy, role-based access control, tagging, resource standards, and governance controls.
Lead and support Azure migration and modernization activities, including re-hosting, re-platforming, refactoring, and integration of on-premises workloads.
Architect Azure networking solutions using Virtual Networks, subnets, network security groups, route tables, load balancers, Private Link, Private Endpoints, Azure Firewall, VPN Gateway, ExpressRoute, and DNS services.
Design network segmentation and micro-segmentation patterns aligned with Zero Trust principles, workload isolation requirements, and approved traffic flows.
Implement identity-first security using Microsoft Entra ID, managed identities, RBAC, least-privilege access, Privileged Identity Management, Conditional Access, Key Vault, and secrets-management practices.
Develop and maintain Infrastructure as Code using Terraform and Azure Bicep/ARM templates, with reusable modules, source control, peer review, and automated validation.
Architect and support Azure Kubernetes Service, containerized workloads, registries, ingress, workload identity, policy enforcement, monitoring, and platform lifecycle activities.
Configure and support Azure resources including virtual machines, storage accounts, web applications, databases, integration services, AI resources, and platform services.
Implement monitoring, logging, alerting, and operational visibility using Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Microsoft Sentinel integrations.
Optimize Azure services for availability, reliability, performance, security, and cost efficiency; support tagging, budgets, utilization reviews, and FinOps practices.
Support Azure AI and Azure OpenAI solutions by applying approved identity, networking, data-protection, logging, and governance patterns.
Participate in architecture reviews, security reviews, threat assessments, disaster-recovery planning, operational-readiness reviews, and production troubleshooting.
Create and maintain architecture diagrams, solution designs, implementation guides, standards, runbooks, and operational documentation.
Collaborate with engineering, infrastructure, security, application, data, and business stakeholders to gather requirements and translate them into practical cloud solutions.
Provide technical guidance and knowledge transfer to cloud engineers and partner teams while remaining directly involved in implementation and issue resolution.