[Hiring] Senior Cloud Infrastructure Specialist - Azure Landing Zone Architect @CTI Consulting

Role Description

This is a remote position.

CTI Staffing is partnering with a leading technology solutions organization to find a Senior Cloud Infrastructure Specialist (Azure Landing Zone Architect) for a fully remote, 8-week consulting engagement.

You'll own an enterprise Azure landing zone from first workshop to final handoff. This is a design-and-build role: you set the architecture, then you deploy it. If you like short, high-impact engagements where you see your design running in production before you leave, this is that.

What You'll Do

• Lead stakeholder interviews and technical workshops to establish design requirements across architecture, security, and networking
• Design management group hierarchies, subscription structures, and governance frameworks aligned with Azure best practices
• Architect network topology including virtual WAN, IP addressing, ExpressRoute connectivity, segmentation, and DNS
• Define privileged access, encryption, key lifecycle, RBAC, and tagging strategies
• Build and deploy the landing zone through Terraform and CI/CD pipelines
• Configure shared resource hubs, next-generation firewalls, virtual networks, NSGs, and monitoring
• Design redundancy, backup, and disaster recovery including multi-region and availability zone strategies
• Deliver knowledge transfer sessions to client technical teams

Qualifications

• 7+ years in cloud infrastructure design and implementation
• 5+ years hands-on with Microsoft Azure
• Proven delivery of enterprise Azure landing zones, design through deployment
• Deep Azure networking: Virtual WAN, ExpressRoute, DNS, NSGs, firewalls
• Terraform-based IaC with CI/CD pipeline experience
• Strong Azure governance, security, and compliance knowledge
• Next-generation firewall experience, Palo Alto preferred
• Client-facing communication and stakeholder management skills

Requirements

• Azure certifications (AZ-305, AZ-104 or equivalent)
• Azure Backup and Azure Site Recovery implementations
• Azure Policy and cost management tooling
• Compliance framework exposure (SOC 2, ISO 27001, HIPAA)
• Scripting in PowerShell, Python, or Bash

Technical Environment

• Microsoft Azure
• Terraform
• CI/CD (Azure DevOps or GitHub Actions)
• Virtual WAN
• ExpressRoute
• Palo Alto NGFW
• Entra ID
• Azure Monitor

What Success Looks Like

• A fully documented, deployed, and monitored enterprise landing zone within 8 weeks
• Governance, security, and DR frameworks the client team can operate without you
• Clean knowledge transfer to client engineering teams