Manager, Cloud Architecture

Job Description Summary

‎

The Manager, Cloud Architecture translates the enterprise cloud and infrastructure strategy into disciplined, day-to-day execution. Reporting to the Director of Cloud & Infrastructure Solutions, this role leads a team of systems engineers, network engineers, identity engineers, and access management specialists responsible for the reliability, security, and continuous optimization of Mosaic Health’s cloud and on-premises environments.
This is a player-coach position: technically credible enough to challenge design decisions and validate architectural proposals, and operationally strong enough to hold the team accountable to delivery standards, SLAs, and cost targets. The Manager is the Director’s primary execution partner and acts as the team’s single point of accountability for platform health, security posture, and operational quality.

‎

How will you make an impact & Requirements

‎

Responsibilities

Cloud Platform Execution

• Execute the enterprise cloud strategy (Azure-primary, multi-cloud aware) across IaaS, PaaS, SaaS, and hybrid environments, ensuring the team delivers to architectural standards set by the Director.
• Own day-to-day Azure operations — compute, storage, networking, identity, and cost governance — with full accountability for platform health and SLA adherence.
• Lead FinOps execution: monitor cloud spend, enforce tagging and cost allocation standards, identify and deliver optimization targets, and report performance to the Director.
• Oversee the SaaS portfolio operationally — ensuring integrations are secure, platforms are governed to standard, and lifecycle management is current.
• Drive automation adoption across the team to eliminate manual toil, accelerate delivery, and improve operational consistency.

Infrastructure & Systems Engineering

• Manage server, storage, and virtualization environments — compute lifecycle, hypervisor platforms, SAN/NAS/object storage — ensuring capacity, performance, and resilience standards are met.
• Oversee endpoint and profile engineering, including Okta administration and access management, ensuring identity hygiene and least-privilege standards are maintained.
• Lead the team’s contribution to high availability and disaster recovery capabilities — executing DR tests, maintaining runbooks, and ensuring audit-ready HIPAA contingency plan documentation.
• Partner with network engineering peers to ensure cloud and infrastructure architecture integrates seamlessly with WAN/LAN and Zero Trust initiatives.

Identity & Access Management

• Oversee IAM engineering operations — provisioning, deprovisioning, role-based access control, and privileged access management — ensuring controls satisfy HIPAA, HITRUST, and internal governance standards.
• Govern Okta platform operations: SSO, MFA, lifecycle management, and integration with enterprise applications.
• Work closely with InfoSec to ensure identity and access controls are current, auditable, and aligned with the organization’s Zero Trust architecture direction.

Team Leadership & Operational Excellence

• Lead, develop, and retain a high-performing team of six to seven engineers across systems, network, and identity disciplines — setting clear expectations, coaching to growth, and managing performance proactively.
• Establish and maintain operational cadences: incident management, change control, problem management, and capacity planning — all grounded in ITSM best practices.
• Maintain enterprise monitoring and observability standards across infrastructure domains, ensuring the team operates proactively with full visibility into platform health.
• Support vendor and partner management at the operational level — holding providers accountable to SLAs and escalating contract or performance issues to the Director.
• Collaborate with cross-functional IT teams and business stakeholders as a trusted execution partner, communicating platform status, risk, and roadmap clearly and without jargon.
• Perform other related duties as assigned.

Qualifications

Required

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Network Administration, or a related field.
• 5+ years of experience in cloud infrastructure, systems engineering, or network engineering — with at least 2 years in a team lead or manager role.
• Hands-on Azure expertise — compute, storage, networking, identity, cost management — with the depth to evaluate architectural proposals, identify risk, and hold engineers accountable to design standards.
• Demonstrated experience managing identity and access environments, including Okta (SSO, MFA, lifecycle management) and enterprise IAM/PAM programs.
• Experience with server and virtualization platforms (VMware/Hyper-V), SAN/NAS storage, and data center operations.
• Working knowledge of network engineering principles — sufficient to coordinate with network engineers on cloud connectivity, segmentation, and Zero Trust integration.
• Proven ability to lead DR/BC execution — test programs, runbook management, RTO/RPO validation — in a HIPAA-regulated environment.
• Practical FinOps experience: cloud cost monitoring, tagging enforcement, rightsizing, and spend accountability reporting.
• Direct experience operating in a HIPAA-regulated healthcare environment; working familiarity with HITRUST CSF and the infrastructure controls required to satisfy audit requirements.
• Strong people leadership skills — coaching, performance management, and building team accountability culture.
• Effective communicator: translates technical complexity into clear, outcome-oriented language for stakeholders and leadership.

Preferred

• Microsoft Azure Administrator (AZ-104) or Azure Solutions Architect (AZ-305) certification.
• Okta Certified Administrator or Okta Certified Consultant.
• Experience with enterprise monitoring platforms (Azure Monitor, Sentinel, Defender for Cloud, or equivalent).
• Familiarity with infrastructure-as-code and automation tooling (Terraform, Bicep, PowerShell, Ansible).
• Experience in multi-entity or post-M&A environments with tenant consolidation or rationalization exposure.
• ITIL Foundation or equivalent ITSM training.

‎

Compensation Range:

$93,675.00

to

$140,513.00

The anticipated base salary range represents the Company's good-faith estimate of the compensation it reasonably expects to pay for this position at the time of posting. Actual compensation will be determined based on factors including experience, skills, qualifications, geographic location, internal equity, and business needs.

Originally posted on