Key Facts

Remote From:

Ohio (USA)

Category: Azure Architect

Full time

Senior (5-10 years)

English

Hard Skills

Microsoft Azure Terraform Azure DevOps Infrastructure as Code (IaC) Software Modules State Machines Private Networks Identity And Access Management Managed Accounts Service Design +2 more

Other Skills

•
Communication

Roles & Responsibilities

Extensive experience designing and deploying Azure Landing Zones using Azure Landing Zone Accelerator (ALZ)
Strong hands-on expertise with Terraform
Experience designing enterprise Azure governance frameworks
Deep knowledge of Microsoft Cloud Adoption Framework (CAF)

Requirements:

Lead the design, implementation, and evolution of Azure Landing Zones using Azure Landing Zone Accelerator (ALZ) and Terraform
Design and deploy enterprise-scale management group hierarchies, subscription vending, and policy-as-code implementations
Develop scalable Terraform modules for reusable infrastructure deployments
Architect and implement hub-and-spoke Azure network topologies with centralized connectivity and secure workload isolation

Georgia IT, Inc.

About Georgia IT, Inc.

Georgia IT, Inc. provides IT Consulting for a wide range of IT services and custom build turn-key enterprise solutions. GIT specializes in improving business scalability and efficiency through BSM and SBA Solutions. GIT transforms business with service management and service automation solutions. We are BMC & HP partners. GIT Services include custom built enterprise software and customer-centric web portals, network design and implementation, remote and site-to-site VPN, network and server security assessment and setup, server and desktop virtualization, and many others. GIT also provides IT Consulting in many areas such as Disaster Recovery Planning, Enterprise Data Backup Strategy, Long Term Strategic IT Planning and Augmentation Professional Services Solutions. Professional Services Specialties: Business Process Integration, Software Integration & Development, Web portal, Networking, Remote and site-to-site VPN, Virtualization Solutions, Product Development Please contact us Hrus@georgiait.com / uthay@georgiait.com/470-798-5000 x 1010 / (732) 890-2535 direct

Founded: 2018

Company size: 51 - 200

Website LinkedIn See all jobs →

Job description

Azure Landing Zone Lead / Architect
Location: Remote
Duration: Contract
Rate: DOE

Key Responsibilities

Lead the design, implementation, and evolution of Azure Landing Zones using Azure Landing Zone Accelerator (ALZ) and Terraform.
Design and deploy enterprise-scale management group hierarchies, subscription vending, and policy-as-code implementations.
Develop scalable Terraform modules for reusable infrastructure deployments.
Architect and implement hub-and-spoke Azure network topologies with centralized connectivity and secure workload isolation.
Design management group structures aligned with Microsoft's Cloud Adoption Framework (CAF), customized for enterprise governance requirements.
Establish Azure governance including:
- Azure Policies
- RBAC
- Resource organization
- Cost management
- Subscription governance
- Quota management
Implement Azure Entra ID security and identity solutions including:
- Conditional Access
- Privileged Identity Management (PIM)
- Service Principals
- Managed Identities
- Federated Identity
Build CI/CD pipelines for infrastructure deployments using Azure DevOps or GitHub Actions.
Manage Terraform state and infrastructure versioning following Infrastructure-as-Code best practices.
Design resilient deployment strategies including Blue/Green deployment models and zero-downtime workload transitions.
Partner with enterprise architects and infrastructure teams to convert architectural designs into production-ready Azure Landing Zone deployments.
Support onboarding of multiple application teams while continuously improving and hardening the landing zone.

Required Qualifications

Extensive experience designing and deploying Azure Landing Zones using Azure Landing Zone Accelerator (ALZ).
Strong hands-on expertise with Terraform, including:
- Module development
- State management
- Infrastructure-as-Code best practices
Experience designing enterprise Azure governance frameworks.
Deep knowledge of Microsoft Cloud Adoption Framework (CAF).
Expertise building customized management group hierarchies beyond CAF defaults.
Strong Azure networking experience including:
- Hub-and-spoke architecture
- Centralized connectivity
- Private networking
- VNet peering
- Secure egress architecture
Experience with Azure subscription lifecycle management and enterprise governance.
Strong knowledge of Azure Entra ID including:
- RBAC
- Conditional Access
- PIM
- Managed Identities
- Service Principals
- Federated Identity
Experience integrating Terraform deployments into Azure DevOps or GitHub Actions CI/CD pipelines.
Strong understanding of enterprise security, governance, compliance, and operational best practices.
Excellent communication skills with the ability to work directly with enterprise architecture and infrastructure teams.