> Markdown version of [/jobs/ext/1309172-azure-cloud-architect](https://www.wearedevelopers.com/jobs/ext/1309172-azure-cloud-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Azure Cloud Architect

- **Company:** AVIVA PLC
- **Location:** New York, NY, United States
- **Experience:** Experienced
- **Salary:** $197,600.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing Security, Continuous Integration, Multi-Factor Authentication, Github, Network Topologies, Identity and Access Management, Subnetting, Windows PowerShell, Role-Based Access Control, Zero Trust Network Access, Runbook, SQL Databases, Azure Powershell, Firewalls (Computer Science), CIS Benchmarks, Cloud Optimization, Devsecops, Key Vault, Vulnerability Analysis
- **Published:** July 17, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=eb2a35680da639e4

## About the Role

* Extensive experience designing and implementing Azure cloud architecture in enterprise environments
 * Strong knowledge of Azure Well-Architected Framework and cloud best practices (security, scalability, resilience, governance)
 * Hands-on Azure networking experience (VNets, subnets, NSGs, Azure Firewall, WAF, private endpoints)
 * Azure infrastructure provisioning experience (App Services, VMs, Storage, SQL, Key Vault)
 * Strong IAM expertise (Entra ID, RBAC, MFA, Conditional Access, PIM)
 * Solid understanding of Zero Trust security architecture
 * Experience implementing Azure Policy, governance controls, and security baselines
 * Knowledge of cloud security, threat modeling, and risk assessment
 * Familiarity with ISO 27001, NIST, and related compliance frameworks
 * DevSecOps experience with CI/CD security integration
 * Strong documentation skills (architecture diagrams, runbooks, technical docs)
 * Excellent communication and stakeholder engagement skills

Desirable Skills/Experience:

 * PowerShell and Azure CLI scripting
 * GitHub Actions and Azure cost management
 * Azure Administrator Associate certification
 * Azure Solutions Architect Expert certification, * Azure architecture: 6 years (Preferred)
 * Azure provisioning: 5 years (Preferred)
 * Azure IAM: 4 years (Preferred)
 * Azure networking: 4 years (Preferred)
 * Azure governance: 4 years (Preferred)
 * Well-Architected: 4 years (Preferred)
 * Risk assessment: 4 years (Preferred)
 * Zero Trust : 3 years (Preferred)
 * ISO 27001/NIST: 3 years (Preferred)
 * DevSecOps: 3 years (Preferred)
 * PowerShell/CLI: 2 years (Preferred)
 * Azure cost mgmt: 2 years (Preferred)

## Description

We're seeking an Azure Cloud Security Architect to design and implement secure, scalable Azure architecture across all environments. This includes subscription structure, network topology, and Well-Architected Framework alignment; provisioning core Azure infrastructure (VNets, App Services, VMs, SQL, Storage, Key Vault, AKS); implementing IAM and Zero Trust controls (RBAC, Entra ID, MFA, Conditional Access, PIM); and enforcing governance and compliance (Azure Policy, ISO 27001, NIST). The role also covers risk/vulnerability assessments, DevSecOps integration, and producing runbooks and architecture documentation for knowledge transfer.


## Related Videos

- [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)