Sr. Cloud Application Migration Engineer Azure Cloud Migration

Sr. Cloud Application Migration Engineer Azure Cloud Migration

Tentative duration - 6 - 12 months

Remote / CST work hours

Position Summary

We are seeking an experienced Lead Cloud Migration Engineer to support a large scale data center migration to Microsoft Azure for a healthcare payer organization. This role is a key contributor within the migration factory, responsible for executing repeatable migration activities across multiple waves, including building target environments, coordinating testing, executing cutovers, and managing post go live stabilization.

The Lead Cloud Migration Engineer is the single technical authority for the Azure migration program. This is not a pure advisory or design role - you will design, build, validate, and execute. You will set technical standards, own the infrastructure-as-code delivery, lead cutover nights, and be accountable for the technical integrity of every migration from Wave 1 through Wave 4.

The right person brings both architectural depth (landing zone design, governance, security baselines) and hands-on migration execution experience (Azure Migrate, ASR, Bicep, DNS cutover, rollback procedures). If you have only designed on whiteboards, this is not the right role. If you have only executed migrations without owning the architecture, this is not the right role. We need both.

The ideal candidate is hands on, highly organized, and comfortable operating in structured, wave based migration programs within regulated healthcare environments (HIPAA/HITECH), where precision, communication, and operational rigor are critical.

Key Responsibilities

Design and own the Azure Landing Zone: hub-and-spoke network topology, ExpressRoute/VPN connectivity, NSG policy, DNS zones, subscription and management group hierarchy.

Build and maintain the Bicep/ARM module library - the authoritative IaC for all migrated workloads. Every infrastructure component is code; no manual provisioning in production.

Define and enforce naming conventions, tagging taxonomy, RBAC model, Azure Policy assignments, and resource lock strategy across all waves.

Lead the technical discovery for each application - validate scope, document dependencies (shared SQL instances, integration endpoints, certificate chains, service accounts), and produce the migration design document.

Own the Azure Migrate project: configure replication, monitor replication health, manage test failover cycles, and sign off on replication readiness before each approval block opens.

Author and maintain the technical runbook (playbook) for every application cutover - step-by-step execution sequence, rollback triggers, decision points, and owner assignments.

Lead cutover execution on production nights: execute the runbook, manage the technical team, make rollback decisions within the agreed time box, and confirm application health before declaring success.

Validate DNS cutover, SSL/TLS certificate continuity, IP allowlist updates, firewall rule migration, and F5/load balancer reconfiguration as part of every cutover sequence.

Manage shared SQL instance migrations - coordinate multi-application joint cutovers, validate data integrity post-migration (row counts, checksums, referential integrity).

Support the Enterprise Architecture review gate in each approval block - produce the technical evidence package (network diagram, Bicep validated, security controls mapped, DR tested).

Ensure every migrated workload meets BCDR requirements: Azure Backup policy, Azure Site Recovery replication (where applicable), RPO/RTO validation, and DR test evidence.

Serve as the primary technical escalation point for the delivery team and the QA Engineer during non-production testing, the approval block, and hypercare.

Provide technical input to the CAB submission package - confirm the runbook is approved, Bicep is validated, all pre-cutover checks are complete, and the rollback procedure is tested.

Lead technical retrospectives after each wave - capture lessons learned, update the IaC library, refine the approval block evidence template, and communicate changes to the program team.

Mentor junior cloud engineers on Bicep authoring, Azure Migrate configuration, and migration runbook structure.

Manage the relationship with managed service provider, and application vendors where vendor involvement is required for migration.

Migration Factory Execution

Execute standardized migration factory processes across multiple application waves

Build and configure target environments in Azure following approved landing zone and platform standards

Support re hosted, re platformed, and lightly modernized applications

Ensure readiness of infrastructure, middleware, and application dependencies prior to migration

Environment Build & Readiness

Coordinate provisioning of compute, storage, networking, security, and access for target environments

Validate environment readiness against migration and security checklists

Partner with platform, network, security, and IAM teams to resolve blockers

Ensure target environments meet performance, availability, and compliance requirements

Testing Coordination & Validation

Coordinate and support application, integration, performance, and user acceptance testing (UAT)

Validate connectivity to upstream and downstream dependencies (databases, APIs, batch jobs, vendors)

Track test defects and coordinate remediation with application and infrastructure teams

Ensure formal sign off prior to scheduled cutovers

Cutover & Go Live Execution

Execute application cutovers according to approved runbooks and schedules

Coordinate activities across application, infrastructure, network, security, and business teams

Support data validation, smoke testing, and functional verification post cutover

Ensure minimal disruption to business operations during go live events

Post Go Live Stabilization

Own post go live (hypercare) support windows for migrated applications

Monitor application behavior and coordinate rapid issue resolution

Track and document post migration defects and lessons learned

Support formal transition to steady state operations upon stabilization

Documentation & Reporting

Contribute to migration runbooks, wave plans, and readiness artifacts

Maintain accurate migration status, risks, and issues

Provide input to continuous improvement of migration factory processes

Support audit and compliance documentation as required

Required Qualifications

15+ years of experience supporting enterprise applications or infrastructure migrations

10+ years in cloud/infrastructure engineering, with a minimum of 5 years in Azure specifically (AWS/Google Cloud Platform experience does not substitute).

Led at least two end-to-end Azure data center migration programs - from landing zone design through production cutover and hypercare exit.

Personally executed production cutovers using Azure Migrate, including DNS cutover, replication failover, and post-migration application validation.

Authored Bicep or ARM IaC for multi-application Azure environments - not just used existing modules, but written them.

Migrated or managed SQL Server in Azure - shared instances, Always On configuration, or database migration using Azure Database Migration Service.

Worked in a regulated environment (HIPAA, PCI-DSS, FedRAMP, or equivalent) - understands the difference between 'deployed in Azure' and 'compliant in Azure'.

Experience working in healthcare