Job Responsibilities

• Design and implement cloud architecture solutions across Azure, Microsoft 365, and hybrid environments

• Develop and mature cloud foundations, including landing zones, subscription design, governance, and onboarding standards

• Establish engineering standards for identity, networking, monitoring, resiliency, backup, and operational support

• Partner with architecture, infrastructure, networking, and security teams to deliver scalable cloud solutions

• Enable and integrate Microsoft security, compliance, identity, endpoint, and AI capabilities across the enterprise platform

• Improve cloud operations through enhanced monitoring, alerting, dashboards, telemetry, and service readiness practices

• Develop and maintain cloud governance standards, onboarding processes, and policy enforcement practices

• Implement secure, resilient cloud designs that align with compliance, audit, and risk management requirements

• Support security hardening, baseline remediation, and secure configuration initiatives across Azure and Microsoft 365 environments

• Translate Microsoft E5 and E7 capabilities into scalable engineering standards and operational processes

• Strengthen cloud cost governance through tagging, budget monitoring, reporting, and FinOps practices

• Identify and remediate inefficiencies, configuration drift, and unsupported cloud patterns

• Provide technical leadership, mentorship, and knowledge transfer to engineering teams

• Document standards, procedures, runbooks, and support models to improve operational maturity and consistency

• Contribute to cloud and security roadmap initiatives through hands-on engineering and cross-functional collaboration

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience

• Minimum of 7+ years of experience in cloud engineering, infrastructure engineering, platform engineering, systems engineering, or security engineering, to include but not limited to the following:

• Expert hands-on experience with Azure, Microsoft 365, and hybrid infrastructure environments

• Experience implementing cloud foundations, landing zones, governance frameworks, monitoring, and operational support models

• Experience with scripting and automation using PowerShell, Python, or similar technologies

Preferred Qualifications

• Expertise with Microsoft security and compliance technologies, including Entra ID, Defender, Intune, Purview, and Security Copilot

• Experience enabling Microsoft 365 Copilot, Security Copilot, Entra Suite, or other AI governance capabilities

• Experience designing Azure landing zones and enterprise cloud governance frameworks

• Knowledge of cloud networking, hybrid connectivity, segmentation, and identity-aware access controls

• Experience with observability, logging, monitoring, backup, recovery, and production readiness practices

• FinOps experience, including cloud cost optimization, reporting, and budget governance

• Industry certifications such as Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate, CISSP, CCSP, or equivalent

• Experience mentoring engineers and driving cloud platform standardization across large environments

Certain states require us to disclose the pay range and benefits summary for job openings. For Colorado residents, the compensation range for this position: $116,100 - $158,200. For Washington residents, Illinois residents, New York residents, and Southern California residents, the compensation range for this position: $127,800 - $174,000. For Northern California residents, the compensation range for this position: $133,600 - $181,900. Compensation may vary based on skills, role, and location. Eligible employees at certain levels can participate in a discretionary long-term financial incentive plan, subject to plan participation rules.

Armanino has a robust offering of benefits, including: 

• Medical, dental, vision

• Generous PTO plan and paid sick time

• Flexible work arrangements

• 401K with Profit Sharing

• Wellness program

• Generous parental leave

• 11 paid holidays

For positions based in San Francisco, consistent with the SF Fair Chance Ordinance, an arrest and conviction record will not automatically disqualify a qualified applicant from consideration.  

For Individuals who would be working within the City of Los Angeles, Armanino will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance