Senior Azure Architect

RESPONSIBILITIES:
Kforce has a client that is seeking a Senior Azure Architect in Charlotte, NC.

Key Responsibilities:
* Enterprise Architecture Design: Develop and refine reference architectures for our compute runtime, analyzing workload requirements to determine the best fit across Azure Kubernetes Service (AKS), Azure Container Apps, and Azure App Service
* Resilience & Disaster Recovery: Architect robust Tier 1 systems capable of Active-Active multi-region deployment (RTO <4hr); Design failover patterns for data layers (PostgreSQL Flexible Server, Cosmos DB, Redis Enterprise) and traffic management
* Network & Security Architecture: Design secure networking fabrics, including Hub-and-Spoke models, Private Link/Endpoints, and DNS strategies. Implement "Security by Design" using Entra ID (Managed Identities, Federated Credentials) and rigorous policy enforcement
* Standardization & Governance: Translate complex infrastructure requirements into reusable, policy-compliant patterns; Ensure that every deployment meets our strict standards for observability (Azure Managed Grafana), logging, and cost controls
* Subject Matter Expertise: Act as a primary resource for Azure expertise, consulting with application teams on modernization strategies, database optimization, and cloud-native best

REQUIREMENTS:
* Advanced Data Patterns: Experience designing high-availability data solutions using Azure SQL/PostgreSQL, Cosmos DB (Multi-region write/read), and caching strategies
* Production Operations: Experience with observability stacks (Application Insights, Azure Monitor, Prometheus) and designing for day-2 operations
* Expert Azure Knowledge: Deep understanding of the Azure control plane and service portfolio; You know the limits, quotas, and architectural trade-offs of AKS, App Service, Networking, and Storage Infrastructure as Code (Terraform): Strong proficiency in Terraform. You understand how to architect modular, reusable, and testable infrastructure code for enterprise environments
* Network Engineering: Strong grasp of Azure networking fundamentals, including Virtual Networks, Application Gateways, Azure Front Door/Traffic Manager, and private connectivity
* Security & Identity: Proficiency with Entra ID OIDC/OAuth flows, RBAC models, and cloud security posture management (CSPM)

Nice to Have:
* Experience with Wiz or similar cloud security tools
* Experience interacting with Azure management APIs
* Background in FinOps, including cost anomaly detection and budget enforcement
* Familiarity with GitOps principles (ArgoCD/Flux) and CI/CD workflows

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.