Senior Azure Architect

Kforce has a client that is seeking a Senior Azure Architect in Charlotte, NC. Key Responsibilities:

• Enterprise Architecture Design: Develop and refine reference architectures for our compute runtime, analyzing workload requirements to determine the best fit across Azure Kubernetes Service (AKS), Azure Container Apps, and Azure App Service
• Resilience & Disaster Recovery: Architect robust Tier 1 systems capable of Active-Active multi-region deployment (RTO <4hr); Design failover patterns for data layers (PostgreSQL Flexible Server, Cosmos DB, Redis Enterprise) and traffic management
• Network & Security Architecture: Design secure networking fabrics, including Hub-and-Spoke models, Private Link/Endpoints, and DNS strategies. Implement "Security by Design" using Entra ID (Managed Identities, Federated Credentials) and rigorous policy enforcement
• Standardization & Governance: Translate complex infrastructure requirements into reusable, policy-compliant patterns; Ensure that every deployment meets our strict standards for observability (Azure Managed Grafana), logging, and cost controls
• Subject Matter Expertise: Act as a primary resource for Azure expertise, consulting with application teams on modernization strategies, database optimization, and cloud-native best
• Advanced Data Patterns: Experience designing high-availability data solutions using Azure SQL/PostgreSQL, Cosmos DB (Multi-region write/read), and caching strategies
• Production Operations: Experience with observability stacks (Application Insights, Azure Monitor, Prometheus) and designing for day-2 operations
• Expert Azure Knowledge: Deep understanding of the Azure control plane and service portfolio; You know the limits, quotas, and architectural trade-offs of AKS, App Service, Networking, and Storage Infrastructure as Code (Terraform): Strong proficiency in Terraform. You understand how to architect modular, reusable, and testable infrastructure code for enterprise environments
• Network Engineering: Strong grasp of Azure networking fundamentals, including Virtual Networks, Application Gateways, Azure Front Door/Traffic Manager, and private connectivity
• Security & Identity: Proficiency with Entra ID OIDC/OAuth flows, RBAC models, and cloud security posture management (CSPM)

• Experience with Wiz or similar cloud security tools
• Experience interacting with Azure management APIs
• Background in FinOps, including cost anomaly detection and budget enforcement
• Familiarity with GitOps principles (ArgoCD/Flux) and CI/CD workflows