Job Description & Details
This is a heavy-hitting, hands-on Azure architecture role where you won't just be drawing diagrams in Visio—you'll be actively building out enterprise Landing Zones, hub-and-spoke networking topologies, and scalable Kubernetes environments. It's a hybrid gig based out of McKinney, TX, meaning you'll need to blend deep technical execution with stakeholder management to guide engineering teams and clients through complex cloud transformations.
What You'll Actually Be Doing
Expect to spend your days knee-deep in enterprise-scale cloud foundations, setting up management groups, refining Terraform modules for subscription vending, and designing bulletproof hybrid networking via ExpressRoute and Azure Firewalls. You will act as the bridge between high-level business goals and the DevOps teams deploying the code, routinely troubleshooting peering issues, optimizing FinOps strategies, and ensuring every workload aligns tightly with the Azure Well-Architected Framework. It is fast-paced, high-visibility, and requires someone who can comfortably pivot from a whiteboard architecture session with leadership to debugging a broken CI/CD pipeline.
The Core Tech Stack
You need absolute mastery over Azure Infrastructure—specifically compute (AKS, VMs, App Services), enterprise networking (Virtual WAN, Private Link, UDRs, Azure Firewall), and storage architectures. Beyond native Azure primitives, you must be a practitioner of Infrastructure as Code using Terraform or Bicep, paired with robust CI/CD tooling like Azure DevOps or GitHub Actions. Knowing your way around Entra ID, RBAC, Policy-as-Code, and Azure Landing Zones (CAF) is non-negotiable for keeping this environment secure and compliant.
Interview Expectations
Be prepared for the interviewers to throw a complex multi-region disaster recovery scenario your way, asking you to architect an RTO/RPO-compliant failover strategy utilizing Azure Front Door, paired regions, and SQL geo-replication while balancing cost optimization. They are also going to grill you on advanced networking—expect a whiteboard or architectural deep dive into securing a hub-and-spoke network with Azure Firewall, User Defined Routes, and Private Endpoints to ensure zero data leakage. They want to see that you can think on your feet and defend your design trade-offs under real-world constraints.
Application Advice
When updating your resume for this role, skip the generic summaries and put your Azure Landing Zone and Terraform experience right at the top. Make sure to explicitly detail your background with complex enterprise networking, such as configuring ExpressRoute or implementing hub-and-spoke topologies, as these are the exact keywords the ATS and hiring managers will use to filter out candidates. Highlight any customer-facing or leadership experience where you successfully translated messy business requirements into clean, scalable cloud platforms.