Azure Cloud Architect - Enterprise Landing Zone & Migration

Job Description

Position: Azure Cloud Architect - Enterprise Landing Zone & Migration

Duration: 4+ months

Location: 100% Remote

Interview: Video

Role Overview

The Azure Cloud Architect is responsible for assessing, designing, and delivering an enterprise-grade Azure Landing Zone and leading the migration of workloads into the environment. This role will drive cloud strategy across assessment, implementation, and migration phases, ensuring alignment with Azure best practices, security, governance, and FinOps principles.

Key Responsibilities

Enterprise Cloud Assessment

Lead an Azure current-state assessment, including tenant, subscriptions, resource groups, and core services.

Produce an Azure Current-State Assessment Summary and Target Azure Tenant & Subscription Architecture.

Assess Azure platform workloads (e.g., Azure Virtual Desktop, Microsoft Fabric) including configuration, dependencies, and migration considerations.

Develop an Azure Resource Inventory Summary for ~60–70 VMs, networking components, security controls, monitoring, and platform services.

Recommend Governance, Security, and FinOps designs, aligned to enterprise standards.

Define Azure Landing Zone Architecture and validate against existing platform capabilities.

Map environment to the Azure Well-Architected Framework, documenting gaps and remediation recommendations.

Perform cost and optimization analysis with actionable recommendations.

Define integration assumptions with on prem and modern work (identity, networking, shared services).

Create a phased roadmap (Assessment Implement Migrate) and Migration Wave Strategy with dependency-based sequencing.

Develop and present an executive readout deck with recommendations and next steps.

Enterprise Cloud Implementation

Design and rebuild the Azure Landing Zone to align with enterprise patterns and best practices.

Configure tenant, subscription, and governance models including management group hierarchy, RBAC assignments, policy enforcement, tagging standards, and guardrails.

Implement platform governance for Azure Virtual Desktop and Microsoft Fabric within the landing zone.

Establish a security baseline: logging, policies, access control, monitoring configuration, and threat detection.

Implement cost management and FinOps guardrails and reporting.

Produce platform standards and workload onboarding documentation.

Validate and document network architecture patterns (hub-spoke, private endpoints, DNS, routing).

Develop migration readiness checklists and enablement artifacts.

Provide implementation closeout materials and an executive summary.

Enterprise Cloud Migration

Define and maintain the Migration Wave Plan and schedule.

Lead execution of VM and workload migrations, including Azure Virtual Desktop session hosts and supporting infrastructure.

Validate migrated workloads for connectivity, monitoring, security, and compliance with landing zone policies.

Update Azure configurations for migrated workloads to align with governance, RBAC, tagging, and policy standards.

Conduct post-migration optimization and performance tuning; document optimization summary.

Drive workload stabilization, issue resolution, and initial tuning actions.

Deliver operational handoff documentation and runbooks.

Produce a migration closeout report with lessons learned and future-phase recommendations.

Required Skills & Experience

Proven experience as an Azure Architect leading enterprise cloud assessments, landing zone implementations, and workload migrations.

Hands-on expertise with:

Azure Landing Zone design and rebuild

Azure Policy, RBAC, tagging strategies, and resource organization

Azure Monitor, Log Analytics, and platform logging/alerting

Networking (VNet design, private endpoints, DNS, routing)

Experience with Azure Virtual Desktop and Microsoft Fabric in an enterprise context.

Strong understanding of Azure governance, security baselines, and the Azure Well-Architected Framework.

Demonstrated FinOps mindset: cost analysis, optimization, and guardrail implementation.

Ability to produce executive-level deliverables and technical artifacts.

Excellent communication and stakeholder management skills; able to translate technical concepts for non-technical audiences.

Preferred Qualifications:

Relevant Microsoft certifications (e.g., Azure Solutions Architect Expert, Azure Administrator, Security Engineer, or similar).

Experience with hybrid identity, on prem integration, and modern workplace services.

Experience in large-scale, multi-wave migration programs.

#TB_EN

#ZR

#Linkd

Why TalentBurst?

At TalentBurst, we deliver more than talent, we deliver outcomes. We partner with you to move quickly and connect you to opportunities aligned with your skills and long term growth.

Backed by precision, transparency, and results, we connect top talent with leading organizations through trusted partnerships.

We offer competitive compensation and comprehensive benefits, including medical, dental, vision, and retirement options.

TalentBurst is an equal opportunity employer committed to an inclusive and diverse workforce.Company Description

Founded in 2002 by three former Monster.com executives; TalentBurst is an award-winning full-service Staffing Firm working directly with Fortune 500 companies in the US and Canada. We specialize in Contract and Contract to Permanent roles across many industries and have direct/contractual relationships with all our clients. Please visit our website or come meet us at our offices in Natick, MA, Miami, FL, Christiansburg, VA, Vineland, NJ, Houston, TX & downtown San Francisco, CA

Full-time

Fully remote