Azure Architect / Senior Project Engineer

Azure Architect / Senior Project Engineer

Position Summary

cloudIT is seeking an experienced Azure Architect / Senior Project Engineer to design, implement, and deliver Microsoft cloud and infrastructure projects for our clients.

This is a hands-on technical role. The ideal candidate can architect a solution, explain the design to clients and internal teams, and then perform the engineering work required to successfully deploy it.

This position will work closely with Project Management, Product & Strategy, Service Delivery, and Account Management to take projects from technical discovery and design through implementation, migration, documentation, and operational handoff.

Responsibilities

Azure Architecture and Engineering

Design, implement, and support secure, scalable Microsoft Azure environments.

Architect and deploy solutions involving:

• Azure Virtual Machines
• Azure Virtual Desktop
• Azure networking and Virtual Networks
• VPN and site-to-site connectivity
• Azure Firewall and Network Security Groups
• Azure Storage and Azure Files
• Azure Backup and disaster recovery
• Azure Site Recovery
• Azure Monitor and Log Analytics
• Microsoft Entra ID
• Microsoft Intune
• Conditional Access and identity security
• Hybrid and cloud-only identity environments

Evaluate existing customer environments and recommend modernization, migration, consolidation, or cloud adoption strategies.

Design solutions that balance security, reliability, performance, supportability, and cost.

Project Engineering

Serve as the lead technical engineer for assigned infrastructure and Microsoft cloud projects.

Perform hands-on implementation rather than functioning solely as an architectural resource.

Projects may include:

• On-premises to Azure migrations
• Server migrations and modernization
• Active Directory to Entra ID migrations
• Intune and Autopilot deployments
• Azure Virtual Desktop deployments
• Microsoft 365 tenant migrations
• File server migrations to SharePoint, OneDrive, or Azure Files
• Datacenter to cloud migrations
• Azure networking implementations
• Backup and disaster recovery projects
• Hyper-V and VMware migrations
• Windows Server upgrades
• Infrastructure refresh projects
• Security and identity modernization

Own assigned technical project tasks through completion.

Work with Project Managers to maintain timelines, identify risks, resolve blockers, and communicate technical status.

Develop implementation plans, migration procedures, rollback plans, and validation processes.

Perform scheduled maintenance and after-hours cutovers when necessary.

Validate project completion before transitioning environments to the support team.

Technical Discovery and Solution Design

Participate in client discovery meetings and assess infrastructure, applications, networking, identity, security, licensing, and business requirements.

Identify technical risks, dependencies, and prerequisites before implementation.

Assist with technical designs, Statements of Work, project estimates, and bills of materials.

Provide realistic engineering estimates and identify when additional discovery is required.

Serve as a technical subject matter expert during complex client discussions.

Identity and Endpoint Management

Design and implement Microsoft Entra ID and Intune environments.

Configure and troubleshoot:

• Entra ID Join and Hybrid Join
• Intune enrollment
• Windows Autopilot
• Configuration profiles
• Compliance policies
• Conditional Access
• Multi-factor authentication
• Role-based access control
• Endpoint security policies
• Microsoft Defender integrations

Develop strategies for organizations transitioning away from traditional Active Directory environments.

Networking

Maintain a strong understanding of networking principles required for cloud and infrastructure projects.

Configure and troubleshoot:

• TCP/IP
• DNS and DHCP
• VLANs
• Routing and NAT
• VPNs
• Azure Virtual Networks
• Network Security Groups
• Azure routing
• Public and private addressing
• Hybrid cloud connectivity

Work with common firewall and networking platforms found in client environments.

Security and Governance

Design environments using Microsoft and industry security best practices.

Implement appropriate controls including least privilege, MFA, Conditional Access, encryption, network segmentation, logging, monitoring, backup policies, and role-based access.

Consider security, business continuity, and disaster recovery requirements as part of infrastructure design.

Documentation and Handoff

Maintain accurate project and technical documentation.

Documentation may include:

• Architecture and network diagrams
• Configuration details
• Migration records
• Testing and validation results
• Known issues
• Support procedures
• Backup and recovery configuration

Provide a formal technical handoff to Service Delivery following project completion.

Ensure the environment is documented and supportable before considering the project complete.

Required Experience

• 5+ years of systems, cloud, or infrastructure engineering experience
• 3+ years of hands-on Microsoft Azure experience
• Strong experience with Azure, Entra ID, Microsoft 365, Intune, Windows Server, Active Directory, and Group Policy
• Experience with PowerShell
• Experience with Hyper-V, VMware, or similar virtualization platforms
• Experience performing production infrastructure migrations
• Strong understanding of networking, identity, security, backup, and disaster recovery
• Ability to troubleshoot complex technical issues across multiple platforms
• Ability to independently take projects from discovery through implementation
• Strong documentation skills
• Strong written and verbal communication skills
• Ability to communicate effectively with both technical and non-technical stakeholders

Preferred Experience

Experience working for an MSP, technology consulting firm, or other multi-client environment is strongly preferred.

Additional preferred experience includes:

• Azure Virtual Desktop
• Azure Site Recovery
• Azure Backup
• Azure Files
• SharePoint and OneDrive migrations
• Microsoft Defender
• Microsoft Sentinel
• PowerShell automation
• Bicep, ARM, or Terraform
• Veeam
• Cisco Meraki
• Sophos, Fortinet, or similar firewall platforms
• Azure cost optimization
• Project estimation and Statement of Work development

Certifications

Microsoft certifications are preferred but equivalent hands-on experience will be considered.

Relevant certifications include:

• Azure Solutions Architect Expert
• Azure Administrator Associate
• Azure Network Engineer Associate
• Azure Security Engineer Associate
• Identity and Access Administrator Associate
• Endpoint Administrator Associate

What Success Looks Like

The successful Azure Architect / Senior Project Engineer will:

• Independently lead technically complex projects
• Design solutions that can realistically be implemented and supported
• Perform the engineering required to execute their designs
• Identify project risks before they impact delivery
• Provide accurate technical recommendations and estimates
• Communicate effectively with clients and internal teams
• Deliver well-documented and supportable environments
• Follow repeatable standards and best practices
• Minimize post-project technical debt and support issues

This is not a purely advisory architecture role. We are looking for someone who can design the solution, build the solution, troubleshoot it, migrate the customer, and own the technical outcome.