IT Cloud Lead

Overview

Capital Health is the region's leader in providing progressive, quality patient care with significant investments in our physicians, nurses, staff, and technology. Capital Health is a dynamic health care resource accredited by DNV that includes two hospitals, an outpatient center, satellite ED, and an expansive network of primary and specialty care. Capital Health Medical Group is made up of more than 600 physicians and other providers who offer primary and specialty care, as well as hospital-based services, to patients throughout the region.

Capital Health recognizes that attracting the best talent is key to our strategy and success as an organization. We aim for flexibility in structuring competitive compensation offers to attract the best candidates.

The listed pay range reflects compensation for a full-time equivalent (1.0 FTE) position. Actual compensation may differ depending on assigned hours and position status (e.g., part-time).

$ - $

40

Summary

The IT Cloud Lead is a senior-level technical leader responsible for the hands-on execution, leadership, and continuous improvement of secure and scalable cloud infrastructure at Capital Health. With a primary focus on Microsoft Azure, this role guides cloud adoption efforts, implements infrastructure best practices, and mentors technical teams in cloud engineering and security operations.

This position plays a critical leadership role in cloud transformation and Zero Trust implementation, working closely with architects, Dev Ops, and security teams to ensure cloud infrastructure aligns with organizational, security, and compliance requirements.

• Required:
  
  Bachelor’s degree in Computer Science, Engineering, or related field; or equivalent experience
• Preferred:
  Master’s degree or advanced certifications in cloud architecture or cybersecurity

• 5+ years of progressive IT experience, including:
• 3+ years designing and implementing enterprise cloud infrastructure (primarily Azure)
• 2+ years leading cross-functional teams or initiatives in cloud or security engineering
• Hands-on experience with hybrid networking, cloud security, and automation practices
• Experience working in compliance-sensitive industries (e.g., healthcare, finance)

• Expert knowledge of Azure cloud services: VNets, Application Gateway, Azure Firewall, NSGs, Route Tables, DNS
• Practical experience with hybrid cloud networking:
  Express Route, VPN, private endpoints
• Advanced skills in identity and access management:
  Azure AD, conditional access, RBAC, Entra
• Proficient in IaC and Dev Ops tooling:
  Terraform, Bicep, Azure Dev Ops, Git Hub Actions
• Skilled in Microsoft Defender for Cloud, Key Vault, Azure Policies, Sentinel
• Strong understanding of Zero Trust enforcement in infrastructure and identity
• Knowledge of regulatory compliance frameworks (HIPAA, NIST, PCI-DSS, CIS Benchmarks)
• Demonstrated leadership, mentorship, and communication abilities

• Microsoft Certified:
  Azure Solutions Architect Expert
• Microsoft Certified:
  Cybersecurity Architect Expert
• Microsoft Certified:
  Azure Network Engineer Associate
• Microsoft Certified:
  Identity and Access Administrator Associate
• AWS Certified Solutions Architect – Professional

• Implement secure and resilient Azure cloud and hybrid infrastructure in line with enterprise standards
• Guide teams in the adoption of infrastructure-as-code, CI/CD, and cloud automation best practices
• Support the enforcement of cloud governance policies and configuration baselines
• Lead infrastructure reviews, performance optimization, and incident response support
• Embed Zero Trust principles across infrastructure and access models
• Drive the implementation of threat detection, monitoring, and alerting systems
• Collaborate across engineering, operations, and security teams to deliver secure infrastructure
• Mentor and coach team members on cloud best practices and technologies

• Lead modernization and migration initiatives, including replatforming and optimization
• Assist with cloud security assessments and ensure timely remediation of…