Sr. Azure Cloud Architect

KLA • Milpitas, CA

6d

About The Position

KLA is seeking a hands-on Senior Azure Cloud Architect to join its Cloud & AI Platform organization. The role designs, implements, secures, and optimizes enterprise solutions on Microsoft Azure while supporting hybrid integration with on-premises infrastructure and other cloud platforms. The successful candidate combines Azure architecture knowledge with practical engineering experience in cloud networking, identity, security, automation, platform services, Kubernetes, monitoring, and cost optimization. The architect collaborates with Infrastructure, Cybersecurity, Application Development, Data, Engineering, and Business teams to deliver scalable, resilient, secure, and supportable cloud solutions.

KLA’s IT group supports business growth and productivity by connecting people, processes, and technology around the world. It focuses on improving the technology that drives the business and empowering employees through customer service, creativity, and technological excellence.

Requirements

• Bachelor’s degree in computer science, Computer Engineering, Information Technology, or a related field and eight years of related experience; or a master’s degree and five years of related experience.
• Five years of hands-on Microsoft Azure architecture or engineering experience supporting enterprise production environments.
• Strong experience with Azure IaaS and PaaS services, cloud networking, identity, security, governance, monitoring, and operational support.
• Hands-on experience with Azure landing zones, Azure Policy, RBAC, Microsoft Entra ID, Private Link, ExpressRoute or VPN connectivity, and Azure security services.
• Experience troubleshooting complex Azure infrastructure, networking, identity, security, deployment, and application-connectivity issues.
• Understanding of cloud security principles, including encryption, key management, secrets management, network segmentation, logging, least privilege, and Zero Trust.
• Knowledge of cloud governance, observability, business continuity, disaster recovery, cost management, and operational excellence.
• Strong written and verbal communication skills, including the ability to produce clear technical documentation and collaborate across teams.

Responsibilities

• Design, implement, and support scalable, highly available, resilient, and secure solutions using Microsoft Azure IaaS and PaaS services.
• Design and maintain Azure landing-zone capabilities, including management-group and subscription organization, Azure Policy, role-based access control, tagging, resource standards, and governance controls.
• Lead and support Azure migration and modernization activities, including re-hosting, re-platforming, refactoring, and integrating on-premises workloads.
• Architect Azure networking solutions using Virtual Networks, subnets, network security groups, route tables, load balancers, Private Link, Private Endpoints, Azure Firewall, VPN Gateway, ExpressRoute, and DNS services.
• Design network segmentation and micro-segmentation patterns aligned with Zero Trust principles, workload isolation requirements, and approved traffic flows.
• Implement identity-first security using Microsoft Entra ID, managed identities, RBAC, least-privilege access, Privileged Identity Management, Conditional Access, Key Vault, and secrets-management practices.
• Develop and maintain Infrastructure as Code using Terraform and Azure Bicep/ARM templates, with reusable modules, source control, peer review, and automated validation.
• Architect and support Azure Kubernetes Service and containerized workloads, including registries, ingress, workload identity, policy enforcement, monitoring, and platform lifecycle activities.
• Configure and support Azure resources, including virtual machines, storage accounts, web applications, databases, integration services, AI resources, and platform services.
• Implement monitoring, logging, alerting, and operational visibility using Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Microsoft Sentinel integrations.
• Optimize Azure services for availability, reliability, performance, security, and cost efficiency; support tagging, budgets, utilization reviews, and FinOps practices.
• Support Azure AI and Azure OpenAI solutions by applying approved identity, networking, data-protection, logging, and governance patterns.
• Participate in architecture and security reviews, threat assessments, disaster-recovery planning, operational-readiness reviews, and production troubleshooting.
• Create and maintain architecture diagrams, solution designs, implementation guides, standards, runbooks, and operational documentation.
• Collaborate with engineering, infrastructure, security, application, data, and business stakeholders to gather requirements and translate them into practical cloud solutions.
• Provide technical guidance and knowledge transfer to cloud engineers and partner teams while remaining directly involved in implementation and issue resolution.

Benefits

• Medical, dental, vision, life, and other voluntary benefits.
• 401(k) with company matching.
• Employee stock purchase program (ESPP).
• Student debt assistance.
• Tuition reimbursement program.
• Development and career growth opportunities and programs.
• Financial planning benefits.
• Wellness benefits, including an employee assistance program (EAP).
• Paid time off and paid company holidays.
• Family care and bonding leave.
• Participation in performance incentive programs may be available.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior