Azure Cloud Architect
First seen by Alion on Sep 18, 2026.
Role Overview:
Role is offshore with remote participation with atleast 5 hours overlap with US business hours for architecture workshops.
Cloud Architecture & M&A Integration (Primary Azure, Secondary AWS):
- Lead M&A discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity.
- Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations.
- Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments.
- Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments.
Infrastructure & Core Network Services:
- Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers.
- Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks.
- Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways.
Security & PKI (Public Key Infrastructure):
- Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities.
- Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways, and API Management services for robust encryption in transit.
- Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages.
Required Technical Skills and Qualifications:
Core Experience:
- Experience: 10 - 12 years in IT infrastructure, with at least 5+ years dedicated strictly to cloud architecture.
- M&A Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions.
Azure Expertise:
- Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints.
- Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization.
- Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates.
Network & Security Services:
- Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures.
- Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey).
Preferred & Advantageous Skills:
- Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a strong plus.
- Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional
Additional skills on AWS will be an advantage.
Skills
Cloud Architect, Azure, Terraform, Identity Management, AWS, Solution Architect, Microsoft PKI, IPAM