Senior Azure Cloud Architect Needed — IaaS, CAF, Terraform, Security, CI/CD

Sr. Azure Cloud Architect / Engineer — Part-Time Freelance Location: Remote Engagement: Part-time / freelance / project-based Availability: Ongoing, as-needed support Company: SKYTEK Solutions, LLC About the Role We are looking for a senior-level Azure Cloud Architect / Engineer to assist our team on a part-time freelance basis with advanced Azure infrastructure, security, automation, and cloud architecture projects. This is not an entry-level or basic admin role. We need someone who is highly experienced, hands-on, and comfortable working in real enterprise environments. The ideal candidate has deep experience designing, securing, deploying, and supporting Azure IaaS environments using Microsoft best practices, the Cloud Adoption Framework, Terraform/IaC, runbooks, CI/CD pipelines, and strong security controls. You will work alongside our internal engineering team on client cloud environments, architecture reviews, migrations, automation, hardening, and ongoing optimization. Responsibilities The selected consultant will assist with: Designing and reviewing Azure IaaS environments Azure landing zone architecture using Microsoft Cloud Adoption Framework principles Hub-and-spoke network design, VPN, routing, NSGs, Azure Firewall, and private networking Terraform / Infrastructure as Code development and review Azure DevOps or GitHub-based CI/CD pipelines for infrastructure deployment Azure Automation runbooks and operational automation Security hardening of Azure environments Identity and access design using Entra ID, PIM, RBAC, MFA, and Conditional Access Backup, disaster recovery, monitoring, alerting, and operational readiness Cost optimization, rightsizing, and Azure best-practice reviews Documentation of architecture, runbooks, deployment processes, and support procedures Assisting with complex troubleshooting and escalation support Required Experience The right candidate must have strong hands-on experience with: Microsoft Azure IaaS Azure Cloud Adoption Framework Azure landing zones Terraform / IaC Azure DevOps and/or GitHub Actions CI/CD pipelines Azure Automation runbooks Azure networking Entra ID / Azure AD RBAC, PIM, Conditional Access, MFA Azure security best practices Backup, DR, monitoring, logging, and governance Enterprise client environments Preferred Experience Strong preference for candidates with experience in: MSP or consulting environments Multi-tenant or multi-client Azure support Azure Migrate Windows Server workloads in Azure Active Directory integration with Azure Defender for Cloud Sentinel / SIEM integrations Policy-as-Code Bicep, ARM templates, or PowerShell automation SOC 2 / ISO 27001 aligned environments Regulated industries such as healthcare, finance, or enterprise manufacturing Ideal Candidate We are looking for someone who is: Senior, experienced, and confident Hands-on, not just theoretical Security-focused Excellent at documenting work Able to explain complex cloud decisions clearly Comfortable working with an MSP engineering team Reliable, responsive, and professional Able to jump into existing environments and quickly assess what is needed Focused on doing things the right way, not quick-and-dirty cloud builds Engagement Details This is a part-time freelance role with ongoing project work. Hours may vary based on client needs, but we are looking for someone who can become a trusted senior cloud resource for advanced Azure architecture and engineering support. Availability during some US business hours is preferred. How to Apply Please include: A brief summary of your Azure architecture experience Examples of Azure IaaS or landing zone projects you have completed Your experience with Terraform and CI/CD pipelines Your experience with Azure security, CAF, and governance Your hourly rate and general availability Any relevant Microsoft certifications Screening Questions Please answer the following: Describe an Azure landing zone you designed or implemented. What architecture did you use? How do you structure Terraform for enterprise Azure deployments? What are the most important Azure security controls you implement by default? Have you built CI/CD pipelines for Azure infrastructure deployment? Please explain. How do you approach cost optimization and governance in Azure?