Note: The job is a remote job and is open to candidates in USA. Lucid Services Group is seeking an experienced cloud engineering professional to support its growing Microsoft Azure environment. The Cloud Architect will build, automate, deploy, and operationalize Azure infrastructure, including the Azure Landing Zone, DevOps pipelines, Microsoft Fabric workloads, and Azure AI capabilities, while meeting enterprise security and governance standards.
Responsibilities
- Design, build, configure, and enhance Microsoft Azure infrastructure using established cloud architecture and security standards
- Support completion and ongoing evolution of the Azure Landing Zone , including subscriptions, management groups, networking, identity, governance, policies, logging, and security controls
- Build and maintain Azure networking components, including VNets, subnets, routing, private DNS, firewalls, and private endpoints
- Implement Azure resources using repeatable, automated deployment patterns rather than manual configuration
- Troubleshoot cloud infrastructure, connectivity, identity, deployment, and configuration issues
- Develop and maintain reusable Terraform modules and Infrastructure as Code (IaC)
- Automate provisioning and configuration of Azure infrastructure through source-controlled code
- Establish appropriate Terraform state management, module standards, versioning, and deployment practices
- Review infrastructure code through pull requests and peer-review processes
- Ensure infrastructure changes are traceable, repeatable, and deployed through approved pipelines
- Build and maintain CI/CD pipelines for infrastructure and application/cloud workload deployments
- Use Git-based workflows for source control, branching, pull requests, peer review, and release management
- Implement automated validation, testing, security scanning, and deployment controls within pipelines
- Establish approval gates for every path to production
- Ensure production environments cannot be changed through unapproved or out-of-pipeline deployment methods
- Support automated promotion of infrastructure and workloads across development, test, and production environments
- Partner with data and analytics teams to architect and deploy Microsoft Fabric workloads in Azure
- Implement the supporting Azure infrastructure, networking, identity, security, monitoring, and deployment automation required for Fabric
- Support enterprise data governance requirements, including PHI classification, access controls, and Data Loss Prevention (DLP)
- Help establish repeatable deployment patterns for Fabric environments and workloads
- Partner with AI and application teams to provision and operationalize Azure services required for AI initiatives
- Build secure Azure infrastructure and deployment patterns supporting AI workloads
- Implement identity, networking, private connectivity, monitoring, and security controls for Azure AI services
- Help development and AI teams consume Azure capabilities through secure, repeatable, automated patterns
- Monitoring & Alerting: All deployed infrastructure and workloads must have appropriate monitoring, logging, diagnostics, and actionable alerting
- Controlled Production Deployments: Every path to production must use an approved deployment pipeline with appropriate approval gates. No unmanaged or out-of-pipeline production changes
- Security by Policy: Security guardrails must be implemented and enforced through Azure governance and policy wherever possible
- Least-Privilege Access: Azure RBAC and identity permissions must follow least-privilege principles
- Private Connectivity: Private endpoints and appropriate network isolation must be used for applicable Azure services
- Microsoft Defender: Appropriate Microsoft Defender for Cloud coverage and security monitoring must be enabled
- Data Protection: Fabric and AI workloads handling protected information must implement appropriate PHI classification, DLP, access controls, and data security protections
- Infrastructure and security controls must be implemented as code wherever practical to support repeatability, auditability, and compliance
Skills
- • Strong hands-on experience engineering solutions in Microsoft Azure
- • Strong experience with Terraform and Infrastructure as Code
- • Experience developing reusable Terraform modules and managing enterprise-scale IaC repositories
- • Hands-on experience with Git , including branching, pull requests, code reviews, and version-controlled infrastructure
- • Experience building and maintaining CI/CD and DevOps pipelines
- • Experience with Azure DevOps and/or GitHub Actions
- • Working knowledge of Azure networking, including VNets, subnets, NSGs, routing, DNS, Private Link, and private endpoints
- • Experience with Azure identity and access management, including Microsoft Entra ID and Azure RBAC
- • Experience implementing Azure governance using Azure Policy , management groups, tagging, and related controls
- • Experience implementing Azure monitoring, logging, diagnostics, and alerting using tools such as Azure Monitor, Log Analytics, and Application Insights
- • Experience implementing cloud security controls and working with Microsoft Defender for Cloud
- • Strong understanding of cloud security, least-privilege access, secrets management, and secure deployment practices
- • Ability to independently take technical requirements and translate them into working, production-ready cloud infrastructure
- • Strong troubleshooting skills across cloud infrastructure, networking, identity, security, and deployment automation
- • Experience implementing or operating an enterprise Azure Landing Zone
- • Experience with the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework
- • Hands-on experience with Microsoft Fabric infrastructure, administration, networking, governance, or deployment automation
- • Experience supporting Azure AI / Azure OpenAI / AI platform workloads
- • Experience with Azure Key Vault, managed identities, Private Link, and enterprise network security patterns
- • Experience implementing policy-as-code and automated security/compliance validation
- • Experience working in healthcare or another highly regulated environment
- • Familiarity with HIPAA, PHI, data classification, DLP, and healthcare data security requirements
- • Experience with scripting and automation using PowerShell, Azure CLI, Python, or similar technologies
Company Overview
Company H1B Sponsorship