Azure Platform Engineering Lead

Azure Platform Engineering Lead

At cb5, we are on a mission to find exceptional talent. Our tight-knit organization is led by five brothers, each technology leaders in their respective technical fields and driven to foster a culture of excellence through solidarity. We are seeking an Azure Platform Engineering Lead to stand up and own the Azure platform for a greenfield Department of Defense hybrid multi-cloud program.

This team is on the front lines, shaping the systems that protect us from advanced threats. We are looking for highly motivated, results-oriented professionals who thrive on solving complex technical challenges in a dynamic environment. The Azure Platform Engineering Lead is the technical authority for Azure on the program. You will design and build the Azure foundation, including landing zones, management group and subscription structure, policy and governance, platform networking, and the platform services enterprise workloads run on.

Azure is one of three platforms in this environment, alongside AWS and on-premises VMware Cloud Foundation, so much of the work is holding Azure to one program reference architecture rather than letting it become a separate design. The role is the direct engineering counterpart to the platform vendor and to the customer's cloud architecture leadership, and it is hands-on. You will write the infrastructure code that stands the platform up, not only the design that describes it.

This is a full time position working onsite in either Colorado Springs, CO or Huntsville, AL, requiring less than 10% travel. Salary: $155,000 - $175,000

Key Responsibilities

• Serve as the technical authority for Azure, owning the Azure platform architecture, engineering standards and design decisions.
• Design and build Azure landing zones, including management group hierarchy, subscription strategy, naming and tagging, and separation of platform from workload.
• Own Azure governance, including Azure Policy and initiatives, role-based access control, cost management, and the guardrails that keep workload teams inside the design.
• Design Azure platform networking with the Network team, including virtual network topology, hub and spoke or virtual WAN, Express Route and hybrid connectivity, DNS and network security controls.
• Integrate Azure with the program identity architecture, including Entra , conditional access, managed identities and privileged access for platform administration.
• Build the Azure platform through Infrastructure as Code using the program automation standards, and contribute Azure modules back to the shared library.
• Design platform security and compliance, including hardened baselines, key and secret management, logging, and the evidence accreditation depends on.
• Design monitoring, resilience and recovery for the Azure platform, including telemetry, availability targets, and backup and recovery patterns.
• Serve as the engineering counterpart to the platform vendor and to customer cloud architecture leadership, and prepare Azure courses of action and design decisions for architecture review.
• Keep Azure aligned to the program reference architecture so identity, network, security and data patterns match what is delivered on AWS and on-premises.
• Support migration by designing the target Azure landing zones and the platform capabilities each migration wave depends on.

The successful candidate will:

• Be a strong innovator in process improvement and system design.
• Be able to quickly learn challenging concepts, decompose difficult service problems and provide resolution.
• Be able to create and follow standard processes and clearly document results.
• Effectively function as self-starter and identify risks, issues, and opportunities to leadership.
• Have excellent presentation, oral and written skills to facilitate effective and efficient interchanges with senior customer management and customers.

Qualifications

• Must have 10, or more, years of enterprise infrastructure or cloud engineering experience, with 6, or more, years focused on Azure architecture and engineering.
• Must have 2, or more, years serving as the technical lead or design authority for an enterprise Azure environment.
• Hands-on…