5-7 years of hands-on experience with Azure Landing Zones using Terraform.
Proven design experience with hub-and-spoke network topologies.
Familiarity with Microsoft's Cloud Adoption Framework (CAF) with a focus on multi-tier management group structures.
Strong operational and administration skills in Azure environments.
Experience with Azure Entra ID (Azure AD) and IAM features.
Proficiency in Terraform state management and CI/CD integration for deployments.
Understanding of application-tier resilience patterns like Blue/Green structures.
Responsibilities
Design and provision Azure Landing Zones using Terraform, focusing on management group hierarchies.
Implement hub-and-spoke network topologies for centralized connectivity.
Develop multi-tier management group structures beyond CAF defaults.
Manage Azure subscriptions, resources, and enforce governance policies.
Configure Azure Entra ID features including role assignments and access management.
Integrate CI/CD pipelines into Terraform deployments for automation.
Collaborate with architecture teams to create deployable Terraform-based solutions.
Benefits
Flexible work schedule with remote working options.
Ongoing professional development and training programs.
Access to state-of-the-art technology and tools.
Comprehensive health and wellness benefits.
Opportunities for career advancement within a growing organization.
Full Job Description
Hands-on experience deploying Azure Landing Zones using the Azure Landing Zone Accelerator (ALZ) with Terraform - designing, provisioning, and iterating on custom management group hierarchies, subscription vending, and policy-as-code deployments (this is the core, non-negotiable skill).
Proven experience designing hub-and-spoke network topologies - centralized connectivity subscription, hub-based egress (no direct internet from spokes), and spoke-to-hub peering for workload isolation.
Deep working knowledge of Microsoft's Cloud Adoption Framework (CAF), with the ability to design multi-tier management group structures beyond the CAF default (e.g., segmenting workloads by environment, data sensitivity classification, vendor/SaaS ownership, and decommissioning lifecycle) and translate them into deployable Terraform modules.
Strong Azure operational and administration experience - subscription/resource group management, RBAC, quota and policy governance, cost control, and day-2 operations across a multi-subscription environment.
Hands-on experience with Azure Entra ID (Azure AD) and IAM - conditional access, role assignments, PIM, service principals/managed identities, and federated identity for workload access.
Proficiency with Terraform state management, module design, and CI/CD pipeline integration (Azure DevOps or GitHub Actions) for repeatable, versioned landing zone deployments.
Experience with application-tier resilience patterns within a landing zone - e.g., Blue/Green (LIVE/staging) subscription or resource group structures with load-balanced, zero-downtime traffic switching.
Ability to work directly with client architecture teams to translate whiteboard-level segmentation and governance decisions into a deployable Terraform-based landing zone, supporting regulated/enterprise environments.
