Azure Landing Zone Lead / Architect || Columbus, OH (Onsite preferred but Remote available)

Job Summary

We are seeking an experienced Azure Landing Zone Lead/Architect to design, build, and implement an enterprise Azure Landing Zone. The ideal candidate will have strong hands-on architecture and engineering experience, along with the ability to provide technical leadership while translating enterprise governance and networking requirements into scalable Terraform-based Azure deployments.

Required Skills

• Hands-on experience deploying Azure Landing Zones (ALZ) using the Azure Landing Zone Accelerator with Terraform.
• Experience designing and provisioning:
  • Management Group hierarchies
  • Subscription vending
  • Policy-as-Code deployments
• Strong expertise in Hub-and-Spoke network architecture, including:
  • Centralized connectivity
  • Hub-based internet egress
  • Spoke-to-Hub peering
  • Workload isolation
• Deep knowledge of Microsoft Cloud Adoption Framework (CAF) and designing customized multi-tier management group structures.
• Strong Azure administration experience, including:
  • Subscription management
  • Resource Groups
  • RBAC
  • Azure Policies
  • Quotas
  • Cost governance
  • Day-2 operations
• Hands-on experience with Azure Entra ID (Azure AD) and Identity & Access Management:
  • Conditional Access
  • Privileged Identity Management (PIM)
  • Service Principals
  • Managed Identities
  • Federated Identity
• Strong experience with:
  • Terraform modules
  • Terraform state management
  • CI/CD integration using Azure DevOps or GitHub Actions
• Experience implementing resilient Azure deployment patterns, including Blue/Green deployment models.
• Ability to collaborate directly with client architecture teams and convert governance and segmentation designs into production-ready Terraform implementations.