Sr Azure Architect (infra + Azure migrate + Security / Compliance)- Hybrid

Sr Azure Architect (infra + Azure migrate + Security / Compliance)- Hybrid with travel

We need help ensuring the cloud environment we require for application development is good.

Key pointers:

This person will be leading and implementing, and they will need to work with different groups (AppDev, Infrastructure, Pitt Digital) and ensure that the project is happening on time.

Azure Architecture & Design Expertise
Candidate needs to have a strong understanding of Azure landing zones, VNETs, identity (Azure AD / Entra ID), hybrid connectivity, security best practices, and cost optimization (Well‑Architected Framework). They will be responsible for setting up our cloud environment. To do this, they will need to

• Candidate will need to assess existing environments and create document designs
  
• Candidate will recommend a design after consulting with Developers and Infrastructure. The document will outline risks and dependencies, and how these will be addressed by the design
  
• Having familiarity with Java 21/25 and Spring 6 ecosystems is strongly encouraged because while we do not expect the consultant to code, they need to understand how these applications interact with Azure services (like Managed Identities, RBAC, and authentication)
  

Application Modernization & DevOps

• Candidate must have experience designing and deploying cloud‑native applications using PaaS services, containers, CI/CD pipelines (Azure DevOps/GitHub), and Infrastructure as Code (ARM/Bicep/Terraform/Azure Front Door).
  
• Candidate must have ability to implement deployment pipelines in Azure DevOps tailored for container-based deployments. Especially, DevOps experience using GitHub actions.
  
• Candidate must set up the environment to ensure that developers and infrastructure have ability to observe and monitor the environments, effectively troubleshoot application health and performance across the hybrid boundary
  

Security, Governance & Compliance

• Candidate must have knowledge of Azure security controls, RBAC, Key Vault, Defender for Cloud, monitoring/logging, and governance (policies, tagging, cost management) in regulated environments.
  
• Candidate must have experience implementing security per above protocols
  
• Candidate must have experience working with teams to implement firewall configurations for cloud within complex institutional networks
  

Proven Azure Migration Experience

• Candidate needs to have hands-on experience migrating on prem applications and infrastructure to Azure using services such as Azure Migrate, App Service, Azure Virtual Machines and modernization approaches.
  
• Candidate must also have containerization expertise with specific experience with Azure Container Apps (ACA) and Azure Static Web Apps.
  
• Candidate will implement the design and review with Developers and Infrastructure
  

Communication & Training

• Candidate will be responsible for creating help & training documentation
  
• Candidate will train infrastructure and developer teams on how to manage the environment