IT Cloud and Security Architect

Capital Health is the region's leader in providing progressive, quality patient care with significant investments in our exceptional physicians, nurses and staff, as well as advanced technology. Capital Health is a five-time Magnet-Recognized health system for nursing excellence and is comprised of 2 hospitals. Capital Health Medical Group is made up of more than 250 physicians and other providers who offer primary and specialty care, as well as hospital-based services, to patients throughout the region.

Capital Health recognizes that attracting the best talent is key to our strategy and success as an organization. As a result, we aim for flexibility in structuring competitive compensation offers to ensure we can attract the best candidates.

The listed pay range or pay rate reflects compensation for a full-time equivalent (1.0 FTE) position. Actual compensation may differ depending on assigned hours and position status (e.g., part-time).

$ - $

40

The IT Cloud and Security Architect is a senior technical leader responsible for setting the strategic direction and architectural design of secure, scalable, and resilient cloud infrastructure primarily in Microsoft Azure. This role defines and governs enterprise cloud architecture across infrastructure domains such as networking, identity, hybrid connectivity, and security, ensuring alignment with organizational, technical, and compliance goals.

As the primary architect for Capital Health’s cloud transformation, this position sets reference standards, leads architecture reviews, and drives the adoption of cloud-native services, Zero Trust models, and infrastructure automation. The role balances strategic vision with technical depth and cross-functional collaboration across multiple cloud and hybrid platforms, including Azure, AWS, and SaaS ecosystems.

• Required:
  
  Bachelor’s degree in Computer Science, Engineering, or related field; or equivalent work experience
• Preferred:
  Master’s degree or advanced certifications in cloud architecture, infrastructure, or cybersecurity

• 10+ years of progressive IT experience, with:
• 5+ years in cloud infrastructure architecture, primarily in Azure
• Demonstrated success in designing hybrid and multi-cloud architectures
• Experience developing infrastructure governance and automation strategies
• Proven track record operating in compliance-heavy sectors (e.g., healthcare, finance)

• Deep expertise in Azure infrastructure: VNets, subnets, Application Gateway, Azure Firewall, Load Balancers, NSGs, Route Tables, Azure DNS
• Advanced knowledge of hybrid networking: VPN Gateway, Express Route, SD-WAN
• Strong background in identity and access architecture:
  Azure AD / Microsoft Entra , RBAC, conditional access, federation
• Proficient in infrastructure-as-code and automation tools:
  Terraform, Bicep, ARM templates, Git Hub Actions, Azure Dev Ops
• Familiarity with cloud-native security tools:
  Microsoft Defender for Cloud, Azure Key Vault, Policies, Sentinel
• Solid understanding of Zero Trust architecture, segmentation, and governance enforcement
• Working knowledge of compliance frameworks (HIPAA, NIST, PCI-DSS, CIS Benchmarks)

• Microsoft Certified:
  Azure Solutions Architect Expert
• Microsoft Certified:
  Cybersecurity Architect Expert
• Microsoft Certified:
  Azure Network Engineer Associate
• Microsoft Certified:
  Identity and Access Administrator Associate
• AWS Certified Solutions Architect
• AWS Certified Security
• Google Professional Cloud Architect

• Define and maintain enterprise reference architectures for Azure and hybrid environments
• Lead cloud architecture design reviews to ensure security, scalability, and compliance
• Architect secure, highly available cloud and hybrid networks using Express Route, VPN, and private endpoints
• Govern the use of cloud services through tagging, policies, resource locks, and security baselines
• Drive the adoption of Zero Trust principles in identity, networking, and infrastructure design
• Collaborate with Dev Ops teams to define reusable infrastructure-as-code modules and patterns
• Guide the…