Senior Azure Cloud Architect

We're seeking a hands-on Senior Azure Cloud Architect to design, build, and own a secure, highly available Azure platform from the ground up. This is a build-focused role that creates a resilient, enterprise-scale environment for mission-critical workloads and sensitive PHI/PII data-ideal for someone who thrives in zero-to-one environments., * Architect and implement a secure, scalable Azure environment (build, stabilize, or rebuild)

• Define subscription strategy, resource organization, and naming standards
• Design hub-and-spoke networking (VNets, subnets, NSGs, routing, private endpoints)
• Establish hybrid connectivity (VPN / ExpressRoute)
• Deliver a segmented, enterprise-grade network aligned to best practices

High Availability & Disaster Recovery (Critical)

• Implement Azure DNS (public/private) with no IP-based failover
• Design global routing via Azure Front Door and/or Traffic Manager
• Ensure multi-region availability, zone redundancy, and automated failover
• Define/validate RTO & RPO; execute and document end-to-end failover testing

Modern Application Hosting

• Deploy/manage AKS or similar container platforms
• Support frontend, backend, APIs, and shared services
• Enable auto-scaling, multi-zone resiliency, and stateless design
• Implement blue/green, canary, weighted routing, and controlled failover strategies

Environment Strategy (Dev / Test / Prod)

• Enforce strict environment isolation (preferably subscription-level)
• Enable controlled promotion across environments
• Manage environment-specific configurations and access controls

CI/CD & Infrastructure as Code

• Implement CI/CD using Azure DevOps or GitHub Actions
• Automate builds, containerization, deployments, and rollback
• Use Terraform, Bicep, or ARM for repeatable, version-controlled infrastructure

Security & Compliance (PHI/PII Ready)

• Implement Azure AD, RBAC, and least-privilege access
• Secure secrets with Azure Key Vault
• Ensure encryption in transit/at rest and eliminate unnecessary public exposure
• Align platform with HIPAA-grade security standards

Observability & Platform Health

• Implement Azure Monitor, Log Analytics, and Application Insights
• Deliver real-time dashboards, alerting, and performance insights
• Provide visibility into regional health, DNS resolution, traffic routing/failover, and AKS performance

Architecture Standards & Governance

• Align with Microsoft Well-Architected Framework (reliability, security, performance, cost, operations)
• Define standards for networking, HA/DR, container architecture, and CI/CD
• Establish best practices for scalability and operational excellence

• 8+ years in cloud/platform engineering; 4+ years hands-on with Azure

• Proven experience building Azure environments from the ground up

• Deep expertise in:

• Azure networking (VNets, NSGs, routing, private endpoints)

• DNS architecture and failover design

• Multi-region HA/DR strategies

• AKS or container platforms

• CI/CD (Azure DevOps or GitHub Actions)

• Infrastructure as Code (Terraform, Bicep, ARM)

• Observability (Azure Monitor, Log Analytics, App Insights)

• Security (Azure AD, RBAC, Key Vault, encryption)

• Experience supporting production systems with PHI/PII data

• Strong systems thinking with a focus on resilience, fault tolerance, and operational stability

This is a fully on-site, 4-month contract position working in Addison, TX. COMP: Up to $95/HR WHY WORK WITH BCT: At BCT, we don't just place people, we support them. Here's what we offer:

• Up to 60% paid medical insurance for employees
• $50,000 life insurance policy on us
• Coverage for home, auto, pets, legal services & identity theft
• Dental & Vision insurance, 401K match, Short and Long-Term Disability
• Flexible Spending Account for healthcare and dependent care
• Anniversary bonuses to celebrate your commitment
• Referral bonuses from $500 $2,000, bring great people with you!, + $120,000-160,000 per year