Azure Landing Zone Lead

About the Role

Azure Landing Zone Lead

Columbus OH

Remote is ok but will prefer columbus OH

Visa any

$90-100/hr

Team: We have an urgent need to identify an Azure Landing Zone Architect that can help build a landing zone.

The client has shared they are behind schedule and while they want to build the landing zone correctly, they need to start with minimum landing zone and iterate and harden (even as they will be onboarding workload from various team), so really need a good combination of hands-on architect/Engineer and thought leadership.

Azure Landing Zone Lead/Architect

Hands-on experience deploying Azure Landing Zones using the Azure Landing Zone Accelerator (ALZ) with Terraform designing, provisioning, and iterating on custom management group hierarchies, subscription vending, and policy-as-code deployments (this is the core, non-negotiable skill).
Proven experience designing hub-and-spoke network topologies centralized connectivity subscription, hub-based egress (no direct internet from spokes), and spoke-to-hub peering for workload isolation.
Deep working knowledge of Microsoft's Cloud Adoption Framework (CAF), with the ability to design multi-tier management group structures beyond the CAF default (e.g., segmenting workloads by environment, data sensitivity classification, vendor/SaaS ownership, and decommissioning lifecycle) and translate them into deployable Terraform modules.
Strong Azure operational and administration experience subscription/resource group management, RBAC, quota and policy governance, cost control, and day-2 operations across a multi-subscription environment.
Hands-on experience with Azure Entra ID (Azure AD) and IAM conditional access, role assignments, PIM, service principals/managed identities, and federated identity for workload access.
Proficiency with Terraform state management, module design, and CI/CD pipeline integration (Azure DevOps or GitHub Actions) for repeatable, versioned landing zone deployments.
Experience with application-tier resilience patterns within a landing zone e.g., Blue/Green (LIVE/staging) subscription or resource group structures with load-balanced, zero-downtime traffic switching.
Ability to work directly with client architecture teams to translate whiteboard-level segmentation and governance decisions into a deployable Terraform-based landing zone, supporting regulated/enterprise environments.

Key Responsibilities & Skills

• Azure Landing Zone Architecture
• Cloud Adoption Framework (CAF) Design
• Hub-and-Spoke Network Topology
• Multi-Subscription Governance & Policy-as-Code
• Azure Identity & Access Management (Entra ID)
• Cost Management & Governance
• Day-2 Operations & Lifecycle Management
• Application Resilience & Blue/Green Deployment
• Client Architecture Translation & Thought Leadership
• Terraform Module Development & State Management

Technical Skills

• Azure (Landing Zones / Management Groups / RBAC)
• Terraform / Azure Terraform Provider
• Azure DevOps / GitHub Actions (CI/CD)
• Azure Policy (Policy-as-Code)
• Azure Networking (Hub-and-Spoke / VNet Peering)
• Azure Entra ID (Conditional Access / PIM / Service Principals / Managed Identities)
• Azure Cost Management Tools
• Azure CLI / PowerShell

Education

Bachelor's Degree in Computer Science, Information Technology, Software Engineering, Cloud Computing, Electrical Engineering. Preferred: Master's in Computer Science, Master's in Information Technology, Master's in Cloud Computing, MBA.

Industry Experience

• Azure Cloud Services
• Enterprise Cloud Adoption
• Regulated / Enterprise Environments
• IT Consulting / Cloud Migration
• Cloud Governance & Security