Azure Cloud Engineer Landing Zone & Migration

Azure Cloud Engineer Opportunity

This is a remote position. About This Opportunity CTI Consulting & Staffing is partnering with a leading technology solutions organization to place an Azure Cloud Engineer supporting a high-impact enterprise cloud transformation engagement. This is a hands-on execution role — not advisory — spanning a full Azure Landing Zone rebuild, governance implementation, and a phased workload migration across a complex enterprise environment. If you've built Landing Zones, executed large-scale VM migrations, and can hand off a fully operational, documented Azure platform, we want to talk.

What You'll Do

• Perform technical discovery and current-state assessment across Azure tenant, subscriptions, resource groups, and core platform services
• Build and deploy the Azure Landing Zone including management group hierarchy, subscription model, RBAC assignments, and Azure Policy definitions
• Implement governance controls, security baselines, logging, diagnostics, monitoring, and alerting configurations aligned to enterprise standards
• Configure network architecture patterns including hub-spoke topology, private endpoints, DNS, NSGs, and routing
• Execute VM and workload migrations across multiple waves — including validation, cutover, post-migration stabilization, and performance tuning
• Configure FinOps guardrails including cost management views, budgets, and optimization recommendations
• Produce technical documentation including architecture artifacts, runbooks, migration checklists, and operational handoff guides
• Contribute technical content to executive-facing deliverables and migration closeout reporting

Requirements

• Must-Have: 5+ years of hands-on Azure engineering experience in enterprise environments
• Proven experience deploying and configuring Azure Landing Zones — management groups, RBAC, Azure Policy, tagging standards, subscription organization
• Direct execution experience on enterprise VM migrations in Azure (20+ VMs; wave planning, cutover, validation, and post-migration stabilization)
• Solid Azure networking depth — hub-spoke topology, VNets, NSGs, private endpoints, DNS, and routing
• Experience with Azure Monitor, Log Analytics, diagnostic settings, and alert configuration
• Ability to produce clear technical documentation: architecture diagrams, runbooks, migration checklists, and operational handoff materials
• Strong troubleshooting and automation mindset; scripting experience (PowerShell and/or Azure CLI)
• Nice-to-Have: Experience with Azure Virtual Desktop (AVD) configuration and governance
• Familiarity with Microsoft Fabric in an enterprise context
• Microsoft certifications: Azure Administrator Associate (AZ-104), Solutions Architect (AZ-305), or Security Engineer (AZ-500)
• Experience with hybrid identity, on-premises integration, and modern workplace services
• FinOps practitioner experience in multi-subscription Azure environments

Technical Environment: Microsoft Azure (Landing Zones, Policy, RBAC, Monitor, Log Analytics, Networking) Azure Virtual Desktop, Microsoft Fabric PowerShell, Azure CLI, ARM/Bicep or Terraform (preferred) Azure Cost Management + Billing

What Success Looks Like: Azure Landing Zone is fully built, governed, and documented per enterprise architecture standards within the first phase All targeted workloads are migrated, validated, and stabilized with zero critical issues at cutover Operations team receives complete handoff documentation, runbooks, and a clear support framework before engagement close

About CTI Consulting & Staffing CTI is a Fort Lauderdale-based staffing firm with 25+ years of experience connecting exceptional IT and engineering talent with leading organizations across the US, Canada, and LATAM. We specialize in onshore and nearshore staffing — contract, permanent, and contract-to-hire. We don't send candidates we wouldn't hire ourselves. Apply now or reach out to learn more: View email address on click.appcast.io