Senior Azure Cloud Engineer / Azure Cloud Architect

Senior Azure Cloud Engineer / Azure Cloud Architect

Location: Brazil (Remote)

Rate: DOE

• Role Summary
• We are seeking a highly experienced Azure Cloud Engineer with strong hands-on expertise in designing, building, governing, automating, and operating enterprise-scale Azure environments.
• The successful candidate must have design-led, hands-on experience and should be capable of building Azure environments from the ground up rather than only supporting or operating pre-existing environments.
• Key Responsibilities
• Azure Architecture & Cloud Adoption Framework
• Design scalable, secure, resilient Azure cloud architectures.
• Apply the Microsoft Cloud Adoption Framework (CAF) and Azure Well-Architected principles.
• Translate business and technical requirements into clear architecture and design decisions.
• Define architecture patterns covering networking, identity, security, governance, availability, and operations.
• Azure Landing Zones
• Design and implement Azure Landing Zones from scratch.
• Demonstrate hands-on experience with greenfield Azure environments.
• Design Management Group, subscription, networking, identity, security, and governance structures.
• Build standardized landing zones for application and infrastructure teams.
• Governance, Security & Guardrails
• Design and implement:
• Azure Management Group hierarchy
• Azure Policy and initiatives
• RBAC models
• Enterprise security guardrails
• Microsoft Entra ID controls
• Logging, monitoring, and SIEM integration
• Ensure environments comply with organizational security and governance standards.
• DevOps & CI/CD
• Design enterprise CI/CD solutions using Azure DevOps and Git-based development practices.
• Strong understanding of:
• Branching strategies
• Pipeline architecture
• Microsoft-hosted vs. self-hosted agents
• Deployment approvals and controls
• Infrastructure deployment pipelines
• Build automated infrastructure provisioning using Terraform and/or Bicep.
• Automation & Solution Design
• Independently design reusable cloud automation frameworks.
• Automate Azure infrastructure provisioning, configuration, governance, and operational activities.
• Strong scripting experience with PowerShell and/or Azure CLI.
• Develop reusable Infrastructure as Code modules and deployment patterns.
• Disaster Recovery & Business Continuity
• Design Azure disaster recovery and business continuity solutions.
• Strong understanding of RTO and RPO requirements.
• Design failover/failback strategies and high-availability architectures.
• Hands-on knowledge of technologies such as Azure Site Recovery, Azure Backup, availability zones, geo-redundancy, and cross-region architectures.
• Participate in DR testing and recovery validation.

Candidate Profile

• Typically, 10+ years of overall IT/cloud infrastructure experience, with significant hands-on Azure experience.
• Strong enterprise Azure infrastructure and platform engineering background.
• Proven ownership of greenfield Azure architecture and Landing Zone implementations.
• Must be capable of explaining why specific architectural approaches were selected, including alternatives and trade-offs.
• Experience across multiple enterprise environments is strongly preferred.
• Demonstrated experience taking cloud solutions through architecture, design, implementation, automation, governance, and production operations.
• Ability to independently troubleshoot and resolve complex cloud infrastructure issues.
• Critical Screening Criteria
• Candidates should be able to demonstrate actual hands-on experience with the following during technical screening:
• Design an Azure Landing Zone from scratch.
• Explain CAF-based architectural decisions, not simply define CAF.
• Design Management Groups, subscriptions, Azure Policies, and RBAC for an enterprise.
• Explain enterprise guardrails and security/SIEM integration.
• Design an Azure DevOps pipeline and explain the choice between self-hosted and Microsoft-hosted agents.
• Explain an appropriate Git branching strategy for infrastructure deployments.
• Demonstrate an infrastructure automation solution using Terraform/Bicep and CI/CD.
• Design a DR solution with defined RTO/RPO targets and explain failover/failback.
• Provide examples where the candidate personally made architecture/design decisions, rather than implementing an existing solution.
• Demonstrate experience beyond maintaining an already established Azure environment.