{"id":3299142,"url":"https://alion.io/job/hso-azure-application-engineering-lead","title":"Azure Application Engineering Lead","company":{"id":174124,"name":"HSO","domain":"hso.com","url":"https://alion.io/company/hso","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":132,"ghost_share":0.341,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":82,"computed_at":"2026-10-30T05:48:23Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":128000,"max_usd":263000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":565},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"Bootstrap","optional":false},{"name":"CI/CD","optional":false},{"name":"FinOps","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure Cosmos DB","optional":true},{"name":"Copilot","optional":true},{"name":"Copilot Studio","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"OneDrive","optional":true},{"name":"SharePoint","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-26T20:58:14Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-31T00:03:19Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"HSO is seeking an Azure Cloud Architect to lead solution design and drive hands-on delivery of complex Microsoft Azure engagements for our clients. This role owns the architecture from discovery through implementation-spanning landing zones, migrations, identity & security, IaC, and cloud governance-while staying grounded in the platform and working directly alongside engineers and clients. A key part of the role is leading large-scale migrations and deployments, mentoring delivery teams, and building reusable assets. \nAs an Azure Cloud Architect, you can expect to…\n Azure Architecture & Platform Engineering Architect enterprise-scale Azure Landing Zones aligned to CAF and Well-Architected principles: management groups, subscriptions, Azure Policy, RBAC, and platform automation. \nDefine compute and PaaS patterns: VM/VMSS sizing, AKS, App Service/Functions, and Container Registry as appropriate. \nArchitect Azure Virtual Desktop solutions: host pool design, FSLogix profile strategy on Azure Files or Azure NetApp Files, Scaling Plans, and AVD Insights monitoring. \nLead design sessions, produce Architecture Decision Records (ADRs), and validate approaches through hands-on proof-of-concept builds. \n\n Azure Migration Lead cloud migration programs across a range of scenarios: on-premises-to-Azure, cloud-to-cloud (e.g., AWS to Azure), and application modernization and refactoring efforts. \nDrive discovery and assessment: dependency mapping, workload inventory, rehost/replatform/refactor recommendations, and wave planning. \nManage cutover execution and hypercare: tooling selection, replication monitoring, test migrations, rollback procedures, and stakeholder communication throughout. \n\n Identity & Security Architect Zero Trust models with Microsoft Entra ID: Conditional Access, PIM role patterns, hybrid identity (Entra Connect/Cloud Sync), and app registration governance. \nDefine security blueprints: Azure Policy, Defender for Cloud, Microsoft Sentinel, Defender XDR integrations, and Key Vault design. \nMap controls to compliance frameworks (ISO 27001, SOC 2, HIPAA, PCI-DSS as applicable) and drive Secure Score improvements. \n\nAutomation, IaC & CI/CD Build modular IaC frameworks in Terraform and/or Bicep: reusable landing zone modules, policy-as-code, and coding standards for delivery teams. \nDesign CI/CD pipelines in Azure DevOps and/or GitHub Actions: environment gates, drift detection, and pre-deployment compliance checks. \nAuthor automation in PowerShell, Azure CLI, and Python: bootstrap scripts, governance tooling, and operational runbooks. \n\nObservability, Resilience & FinOps Design observability platforms: Log Analytics workspace architecture, Azure Monitor, Workbook/dashboard frameworks, and alerting. \nArchitect BCDR solutions with Azure Backup, Site Recovery, and cross-region topologies; validate against RTO/RPO targets. \nLead FinOps efforts: tagging standards, Cost Management reporting, reservation/Savings Plans strategy, and optimization roadmaps. \n\n Consulting & Client Engagement Lead discovery workshops, design sessions, and Well-Architected Reviews; present architecture options with clear trade-offs to technical and business stakeholders. \nStay hands-on throughout delivery: validate designs through working code and demonstrate patterns directly alongside client teams. \nMentor delivery engineers through design reviews, pairing on complex problems, and code reviews. \nArchitect enterprise-scale Azure Landing Zones aligned to CAF and Well-Architected principles: management groups, subscriptions, Azure Policy, RBAC, and platform automation. \nDesign network topologies (hub-and-spoke or Virtual WAN): Azure Firewall, Application Gateway/WAF, Private Link, ExpressRoute/VPN, and DDoS Protection. \nContribute to pre-sales: solution scoping, proposal authoring, SOW definition, and engagement estimates. \n\nYou’re great at…\nArchitecting enterprise-scale Azure Landing Zones aligned to Cloud Adoption Framework and Well-Architected principles.\nLeading cloud migration programs across various scenarios, including discovery and assessment.\nDefining security blueprints and architecting Zero Trust models with Microsoft Entra ID and Defender for Cloud.\nBuilding modular Infrastructure as Code frameworks (Terraform/Bicep) and designing CI/CD pipelines.\nLeading FinOps efforts, designing observability platforms, and architecting robust business continuity solutions.\nPackaging, deploying, and maintaining applications using Intune\nManaging escalated technical issues while remaining calm, professional, and client-focused\nLearning new technologies quickly and applying them in real-world scenarios\nProviding technical thought leadership in Modern Workplace, system integration, and automation\nCommunicating complex technical concepts clearly to non-technical stakeholders\nWorking independently while owning deliverables and collaborating effectively with team members\nPromoting the mission and shared values of the company\nSound interesting? If so, you’ll have…\n8+ years of hands-on experience architecting and delivering Azure solutions across networking, compute, storage, identity, and security. \nProven experience leading Azure migration programs-on-premises, cloud-to-cloud, or application modernization-including assessment, wave planning, cutover, and stabilization. \nProven delivery of enterprise Azure Landing Zones: management group design, Azure Policy, RBAC frameworks, and platform automation. \nSolid IaC experience in Terraform and/or Bicep with Azure DevOps or GitHub Actions CI/CD pipelines. \nStrong Azure networking fundamentals: hub-and-spoke or Virtual WAN, Azure Firewall, Application Gateway/WAF, Private Link, and ExpressRoute/VPN. \nMicrosoft Entra ID experience: Conditional Access, PIM, hybrid identity, and Zero Trust concepts. \nFamiliarity with Azure security services: Defender for Cloud, Microsoft Sentinel, Key Vault, and compliance frameworks. \nAVD experience: host pool design, FSLogix profiles, Scaling Plans, and monitoring. \nProficiency in PowerShell and Azure CLI; Python is a plus. \nStrong analytical, problem-solving, and troubleshooting skills\nExcellent written, verbal, and presentation skills\nStrong client-facing skills, empathy, and the ability to guide clients through complex technical challenges\nAbility to work independently, take ownership, and translate goals into actionable outcomes\nPreferred qualifications include: Experience with tenant-to-tenant Microsoft 365 migrations: Exchange Online, SharePoint/OneDrive, Teams, and Entra ID coexistence and cutover. \nMicrosoft 365 platform: Intune, Exchange Online, SharePoint/OneDrive, Teams, and Purview. \nCopilot readiness/governance, Copilot Studio development, and Microsoft Foundry experience. \nAKS/Kubernetes and cloud data platform experience (SQL MI, Cosmos DB, Synapse Analytics, or Fabric). \nPre-sales and consulting delivery: scoping workshops, SOW authoring, and client relationship management. \nMicrosoft Certified: Azure Solutions Architect Expert (AZ-305) \nMicrosoft Certified: Azure Administrator Associate (AZ-104) \nMicrosoft Certified: Azure Security Engineer Associate (AZ-500) or Cybersecurity Architect Expert (SC-100) \nMicrosoft Certified: DevOps Engineer Expert (AZ-400) \nMicrosoft Certified: Azure Network Engineer Associate (AZ-700) \nMicrosoft 365 Certified (e.g., Enterprise Administrator Expert) \n\nThe Perks\nWe offer competitive pay and a comprehensive benefits package designed to support your health, flexibility, and long-term success. Benefits include generous paid time off, medical, dental and vision coverage, flexible spending accounts, a health reimbursement account, and a 401(k) plan with company match. You’ll also work alongside collaborative, driven teammates in a dynamic and growing professional services environment.\nHSO is an Equal Opportunity Employer.","description_format":"text","description_chars":7849,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["CRM Software","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-10-26T23:01:37Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":3,"expected_fill_days":82,"reasons":["conf:3","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/hso-azure-application-engineering-lead","json_url":"https://alion.io/job/hso-azure-application-engineering-lead.json","meta":{"generated_at":"2026-10-31T00:39:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":889,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":174124},"rest":"https://alion.io/mcp/rest/get_company?id=174124"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhso-azure-application-engineering-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhso-azure-application-engineering-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhso-azure-application-engineering-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hso-azure-application-engineering-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhso-azure-application-engineering-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3299142}},{"tool":"search_jobs","arguments":{"company":"hso.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3299142},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}