> Markdown version of [/jobs/ext/1429180-azure-cloud-architect-administration-specialist](https://www.wearedevelopers.com/jobs/ext/1429180-azure-cloud-architect-administration-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Azure Cloud Architect / Administration Specialist - **Company:** Oz Solutions Group Inc. - **Location:** New York, NY, United States (Remote available) - **Salary:** $90,000.0 - $150,000.0 - **Contract:** Temporary contract - **Skills:** Microsoft Azure, Cloud Computing Security, Continuous Integration, Multi-Factor Authentication, Github, Identity and Access Management, Network Security, Windows PowerShell, Role-Based Access Control, Zero Trust Network Access, Runbook, SQL Databases, Azure Powershell, Firewalls (Computer Science), Bicep, Azure AKS, CIS Benchmarks, Cloud Optimization, Terraform, Devsecops, Azure Resource Manager, Key Vault, Vulnerability Analysis - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=068e2a438da2173a ## About the Role Extensive hands-on experience designing, implementing, AND remediating/extending enterprise Azure environments - able to whiteboard and defend an end-to-end architecture live - Deep knowledge of the Azure Well-Architected Framework and cloud best practices (security, scalability, resilience, governance, cost) - Hands-on Azure networking: VNets, subnets, NSGs, hub-and-spoke, Azure Firewall, WAF, private endpoints - Azure infrastructure provisioning: App Services, VMs, Storage, SQL, Key Vault (AKS a strong plus) - Strong Identity and Access Management expertise: Entra ID, RBAC, MFA, Conditional Access, PIM - Solid Zero Trust security architecture and implementation - Azure Policy, governance controls, and security baselines at scale - Cloud security, threat modeling, and risk assessment - DevSecOps / CI/CD security integration (Azure DevOps and GitHub) and Infrastructure as Code (Bicep, ARM, or Terraform) - Familiarity with regulatory and compliance frameworks (ISO 27001, NIST, etc.) - Strong documentation skills (architecture diagrams, runbooks, technical documentation) and stakeholder communication - Able to work on-site in Lower Manhattan 3 days per week (hybrid) PREFERRED - Azure certifications: Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104) - PowerShell and Azure CLI scripting; GitHub Actions - Azure cost management and optimization - Public sector / regulated-environment experience, * Will you be able to provide 2 references? * Do you have hands-on experience remediating or extending an existing enterprise Azure tenant / landing zone (Entra ID, RBAC, PIM, Zero Trust, hub-and-spoke networking, Azure Policy governance)? ## Description You will extend, remediate, and harden an existing enterprise Azure tenant for a large-scale public sector organization - working within an established, already-defined subscription and management-group structure across Development, QA, UAT, Staging, and Production. This is a hands-on architecture role: you'll provide architectural leadership and build in alignment with the Azure Well-Architected Framework, owning security, identity, networking, governance, and DevSecOps across cloud and on-premises integration. You'll work within an established Azure DevOps and GitHub toolchain. This is not a greenfield build. We're looking for an architect who is just as strong remediating and extending a live enterprise tenant and landing zone as designing one - and who can whiteboard and defend an end-to-end Azure architecture on the spot. WHAT YOU'LL DO - Extend, remediate, and harden an existing enterprise Azure landing zone; refine resource organization, naming conventions, and tagging standards within the established subscription and management-group structure - Design secure network topology (VNets, subnets, NSGs, hub-and-spoke, Azure Firewall/WAF, private endpoints) and produce architecture diagrams for stakeholder approval, aligned to the Azure Well-Architected Framework - Provision and configure core Azure resources (App Services, VMs, SQL, Storage, Key Vault); provision and support Azure Kubernetes Service (AKS) - Implement identity and access management - Entra ID, RBAC, MFA, Conditional Access, and PIM; manage Key Vault and secrets, and support data protection, classification, and DLP - Implement Azure Policy, governance controls, and security baselines; apply Zero Trust principles aligned to citywide Cyber GRC standards - Conduct threat modeling, risk and vulnerability assessments, audits, and remediation tracking; ensure compliance with ISO 27001, NIST, and related frameworks - Integrate security into CI/CD pipelines (DevSecOps) across Azure DevOps and GitHub; automate with Infrastructure as Code (Bicep, ARM, or Terraform), PowerShell, and Azure CLI - Develop runbooks, operational documentation, and architecture diagrams; conduct knowledge transfer to internal teams - Provide occasional off-hours or weekend support during production cutovers, upgrades, and deployments ## Related Videos - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Azure-Well Architected Framework - Cost Optimization in practice](https://www.wearedevelopers.com/videos/2100-azure-well-architected-framework-cost-optimization-in-practice) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)