Senior Cloud Infrastructure Specialist - Azure Landing Zone Architect

This is a remote position.

About This Opportunity

CTI Staffing is partnering with a leading technology solutions organization to find a Senior Cloud Infrastructure Specialist (Azure Landing Zone Architect) for a fully remote, 8-week consulting engagement.

You'll own an enterprise Azure landing zone from first workshop to final handoff. This is a design-and-build role: you set the architecture, then you deploy it. If you like short, high-impact engagements where you see your design running in production before you leave, this is that.

What You'll Do

• Lead stakeholder interviews and technical workshops to establish design requirements across architecture, security, and networking
  
• Design management group hierarchies, subscription structures, and governance frameworks aligned with Azure best practices
  
• Architect network topology including virtual WAN, IP addressing, ExpressRoute connectivity, segmentation, and DNS
  
• Define privileged access, encryption, key lifecycle, RBAC, and tagging strategies
  
• Build and deploy the landing zone through Terraform and CI/CD pipelines
  
• Configure shared resource hubs, next-generation firewalls, virtual networks, NSGs, and monitoring
  
• Design redundancy, backup, and disaster recovery including multi-region and availability zone strategies
  
• Deliver knowledge transfer sessions to client technical teams
  

Requirements

What You Bring

Must-Have:

• 7+ years in cloud infrastructure design and implementation
  
• 5+ years hands-on with Microsoft Azure
  
• Proven delivery of enterprise Azure landing zones, design through deployment
  
• Deep Azure networking: Virtual WAN, ExpressRoute, DNS, NSGs, firewalls
  
• Terraform-based IaC with CI/CD pipeline experience
  
• Strong Azure governance, security, and compliance knowledge
  
• Next-generation firewall experience, Palo Alto preferred
  
• Client-facing communication and stakeholder management skills
  

Nice-to-Have:

• Azure certifications (AZ-305, AZ-104 or equivalent)
  
• Azure Backup and Azure Site Recovery implementations
  
• Azure Policy and cost management tooling
  
• Compliance framework exposure (SOC 2, ISO 27001, HIPAA)
  
• Scripting in PowerShell, Python, or Bash
  

Technical Environment:

• Microsoft Azure, Terraform, CI/CD (Azure DevOps or GitHub Actions), Virtual WAN, ExpressRoute, Palo Alto NGFW, Entra ID, Azure Monitor
  

What Success Looks Like:

• A fully documented, deployed, and monitored enterprise landing zone within 8 weeks
  
• Governance, security, and DR frameworks the client team can operate without you
  
• Clean knowledge transfer to client engineering teams