Senior Azure Cloud Architect

Cutsforth Inc.

Designs and optimizes Cutsforth’s enterprise Azure cloud platform while collaborating with software engineering, security, and operations. Delivering scalable and secure architecture to support connected monitoring and industrial products.

Posted 7/8/2026full-timeRemote • California, Illinois, New York • 🇺🇸 United StatesSenior💰 $135,735 - $168,093 per yearWebsite

Tech Stack

Tools & technologies

AzureCloudFluxKubernetesTerraformVault

About the role

Key responsibilities & impact

Designs, governs, and optimizes Cutsforth’s enterprise Azure cloud platform, establishing the landing zones, network topology, identity model, and security controls that host the company’s software and data products
Partners with software engineering, security, and operations to deliver scalable, secure, and cost-effective cloud architecture that supports Cutsforth’s connected monitoring and industrial product offerings

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience
8-12 years of cloud engineering experience, including 5+ years architecting production Azure environments at enterprise scale
Deep expertise with Azure Landing Zones and the Cloud Adoption Framework (CAF) Enterprise-Scale, including management group hierarchy, subscription vending, and policy-driven governance
Infrastructure as Code mastery with Terraform (Azure Verified Modules) and/or Bicep, including reusable module design, state management, and CI/CD-driven deployments
Strong Azure networking experience: hub-and-spoke and Virtual WAN topologies, Azure Firewall Premium, Private Link/Private Endpoints, NSGs, UDRs, and hybrid connectivity (ExpressRoute, VPN Gateway)
Production Azure Kubernetes Service (AKS) experience: cluster design, Azure CNI networking, workload identity, autoscaling, and GitOps (Flux/ArgoCD)
Microsoft Entra ID expertise (Conditional Access, PIM, managed identities), Entra External ID for B2C/customer identity, and RBAC at scale
Hands-on experience with Azure security and compliance tooling: Microsoft Defender for Cloud, Microsoft Sentinel (SIEM/SOAR), Azure Policy, Key Vault, and Defender for Containers/Servers
Cost optimization and FinOps experience (reservations, savings plans, tagging strategy, chargeback/showback)
Observability fluency with Azure Monitor, Log Analytics, Application Insights, and KQL
Ability to lead Azure Well-Architected Framework reviews across reliability, security, cost, operational excellence, and performance
Strong DevOps background with GitHub Actions / Azure DevOps Pipelines, branch strategy, secrets management, and supply-chain security (SBOM, signed artifacts)

Benefits

Comp & perks

Visa sponsorship is not available for this position
Home office
Corporate policies and safety protocols

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Azure Landing ZonesTerraformBicepAzure Kubernetes ServiceAzure NetworkingMicrosoft Entra IDMicrosoft Defender for CloudAzure MonitorGitHub ActionsAzure DevOps