Application Migration Engineer – Azure Cloud Migration
Position Summary
We are seeking an experienced Lead Cloud Migration Architect to support a
largescale data center migration to Microsoft Azure for a healthcare payer
organization. This role is a key contributor within the migration factory, responsible for
executing repeatable migration activities across multiple waves, including building
target environments, coordinating testing, executing cutovers, and managing
post golive stabilization.
The Lead Cloud Migration Architect is the single technical authority for the Azure
migration program. This is not a pure advisory or design role — you will design, build,
validate, and execute. You will set the technical standards, own the infrastructure-as-
code delivery, lead cutover nights, and be accountable for the technical integrity of
every migration from Wave 1 through Wave 4.
The right person brings both architectural depth (landing zone design, governance,
security baselines) and hands-on migration execution experience (Azure Migrate, ASR,
Bicep, DNS cutover, rollback procedures). If you have only designed on whiteboards,
this is not the right role. If you have only executed migrations without owning the
architecture, this is not the right role. We need both.
The ideal candidate is handson, highly organized, and comfortable operating in
structured, wavebased migration programs within regulated healthcare environments
(HIPAA/HITECH), where precision, communication, and operational rigor are critical.
Key Responsibilities
Design and own the Azure Landing Zone: hub-and-spoke network topology, ExpressRoute/VPN connectivity,
NSG policy, DNS zones, subscription and management group hierarchy.
Build and maintain the Bicep/ARM module library — the authoritative IaC for all migrated workloads. Every
infrastructure component is code; no manual provisioning in production.
Define and enforce naming conventions, tagging taxonomy, RBAC model, Azure Policy assignments, and
resource lock strategy across all waves.
Lead the technical discovery for each application — validate scope, document dependencies (shared SQL
instances, integration endpoints, certificate chains, service accounts), and produce the migration design
document.
Own the Azure Migrate project: configure replication, monitor replication health, manage test failover cycles, and
sign off on replication readiness before each approval block opens.
Author and maintain the technical runbook (playbook) for every application cutover — step-by-step execution
sequence, rollback triggers, decision points, and owner assignments.
Lead cutover execution on production nights: execute the runbook, manage the technical team, make rollback
decisions within the agreed time box, and confirm application health before declaring success.
Validate DNS cutover, SSL/TLS certificate continuity, IP allowlist updates, firewall rule migration, and F5/load
balancer reconfiguration as part of every cutover sequence.
Manage shared SQL instance migrations — coordinate multi-application joint cutovers, validate data integrity
post-migration (row counts, checksums, referential integrity).
Support the Enterprise Architecture review gate in each approval block — produce the technical evidence
package (network diagram, Bicep validated, security controls mapped, DR tested).
Ensure every migrated workload meets BCDR requirements: Azure Backup policy, Azure Site Recovery
replication (where applicable), RPO/RTO validation, and DR test evidence.
Serve as the primary technical escalation point for the delivery team and the QA Engineer during non-production
testing, the approval block, and hypercare.
Provide technical input to the CAB submission package — confirm the runbook is approved, Bicep is validated,
all pre-cutover checks are complete, and the rollback procedure is tested.
Lead technical retrospectives after each wave — capture lessons learned, update the IaC library, refine the
approval block evidence template, and communicate changes to the program team.
Mentor junior cloud engineers on Bicep authoring, Azure Migrate configuration, and migration runbook structure.
Manage the relationship with managed service provider, and application vendors where vendor involvement is
required for migration.
Migration Factory Execution
Execute standardized migration factory processes across multiple application
waves
Build and configure target environments in Azure following approved landing
zone and platform standards
Support rehosted, replatformed, and lightly modernized applications
Ensure readiness of infrastructure, middleware, and application dependencies
prior to migration
Environment Build & Readiness
Coordinate provisioning of compute, storage, networking, security, and access for
target environments
Validate environment readiness against migration and security checklists
Partner with platform, network, security, and IAM teams to resolve blockers
Ensure target environments meet performance, availability, and compliance
requirements
Testing Coordination & Validation
Coordinate and support application, integration, performance, and user
acceptance testing (UAT)
Validate connectivity to upstream and downstream dependencies (databases,
APIs, batch jobs, vendors)
Track test defects and coordinate remediation with application and infrastructure
teams
Ensure formal signoff prior to scheduled cutovers
Cutover & GoLive Execution
Execute application cutovers according to approved runbooks and schedules
Coordinate activities across application, infrastructure, network, security, and
business teams
Support data validation, smoke testing, and functional verification postcutover
Ensure minimal disruption to business operations during golive events
Post GoLive Stabilization
Own postgolive (hypercare) support windows for migrated applications
Monitor application behavior and coordinate rapid issue resolution
Track and document postmigration defects and lessons learned
Support formal transition to steadystate operations upon stabilization
Documentation & Reporting
Contribute to migration runbooks, wave plans, and readiness artifacts
Maintain accurate migration status, risks, and issues
Provide input to continuous improvement of migration factory processes
Support audit and compliance documentation as required
Required Qualifications
15+ years of experience supporting enterprise applications or infrastructure
migrations
10+ years in cloud/infrastructure engineering, with a minimum of 5 years in Azure
specifically (AWS/Google Cloud Platform experience does not substitute).
Led at least two end-to-end Azure data center migration programs — from
landing zone design through production cutover and hypercare exit.
Personally executed production cutovers using Azure Migrate, including DNS
cutover, replication failover, and post-migration application validation.
Authored Bicep or ARM IaC for multi-application Azure environments — not just
used existing modules, but written them.
Migrated or managed SQL Server in Azure — shared instances, Always On
configuration, or database migration using Azure Database Migration Service.
Worked in a regulated environment (HIPAA, PCI-DSS, FedRAMP, or equivalent)
— understands the difference between 'deployed in Azure' and 'compliant in
Azure'.
Experience working in healthcare
Preferred Qualifications
Experience supporting health plan or payer applications (claims, enrollment,
care management, analytics)
Familiarity with migration factory or factorystyle delivery models
Exposure to middleware, databases, or integration technologies
Experience with IT service management or change management processes
Azure certifications or migration tooling experience
Soft Skills
Strong organizational and execution skills
Ability to manage multiple workloads across parallel migration waves
Calm and effective communication during highpressure cutover events
Strong documentation and followthrough
