Sr. Azure Cloud Architect - Milpitas, CA, United States

Originally posted 16 October 2026 by the employer.

This role is responsible for designing, implementing, securing, and optimizing enterprise solutions on Microsoft Azure, while supporting hybrid integration with on-premises infrastructure and other cloud platforms.

About the role

This role involves designing, implementing, securing, and optimizing enterprise solutions on Microsoft Azure, supporting hybrid integration with on-premises infrastructure and other cloud platforms.

What you'll do

• Design, implement, and support scalable, highly available, resilient, and secure solutions using Microsoft Azure IaaS and PaaS services.
• Architect Azure networking solutions using Virtual Networks, subnets, network security groups, route tables, load balancers, Private Link, Private Endpoints, Azure Firewall, VPN Gateway, ExpressRoute, and DNS services.
• Implement identity-first security using Microsoft Entra ID, managed identities, RBAC, least-privilege access, Privileged Identity Management, Conditional Access, Key Vault, and secrets-management practices.
• Develop and maintain Infrastructure as Code using Terraform and Azure Bicep/ARM templates, with reusable modules, source control, peer review, and automated validation.
• Architect and support Azure Kubernetes Service, containerized workloads, registries, ingress, workload identity, policy enforcement, monitoring, and platform lifecycle activities.
• Optimize Azure services for availability, reliability, performance, security, and cost efficiency; support tagging, budgets, utilization reviews, and FinOps practices.

What you'll need

• Bachelor's degree in computer science, Computer Engineering, Information Technology, or a related field, with eight (8) years of related experience; or a master's degree with five years of related experience.
• Five (5) years of hands-on Microsoft Azure architecture or engineering experience supporting enterprise production environments.
• Strong experience with Azure IaaS and PaaS services, cloud networking, identity, security, governance, monitoring, and operational support.
• Hands-on experience with Azure landing zones, Azure Policy, RBAC, Microsoft Entra ID, Private Link, ExpressRoute or VPN connectivity, and Azure security services.
• Experience troubleshooting complex Azure infrastructure, networking, identity, security, deployment, and application-connectivity issues.
• Understanding cloud security principles including encryption, key management, secrets management, network segmentation, logging, least privilege, and Zero Trust.
• Knowledge of cloud governance, observability, business continuity, disaster recovery, cost management, and operational excellence.

Skills: Azure Cloud Architect, IaaS, PaaS, Kubernetes, Infrastructure as Code, Cloud & AI Platform