This is a remote position.
About This Opportunity
CTI Staffing is partnering with a leading technology solutions organization to find a Senior Cloud Infrastructure Specialist (Azure Landing Zone Architect) for a fully remote, 8-week consulting engagement.
You'll own an enterprise Azure landing zone from first workshop to final handoff. This is a design-and-build role: you set the architecture, then you deploy it. If you like short, high-impact engagements where you see your design running in production before you leave, this is that.
What You'll Do
Lead stakeholder interviews and technical workshops to establish design requirements across architecture, security, and networking
Design management group hierarchies, subscription structures, and governance frameworks aligned with Azure best practices
Architect network topology including virtual WAN, IP addressing, ExpressRoute connectivity, segmentation, and DNS
Define privileged access, encryption, key lifecycle, RBAC, and tagging strategies
Build and deploy the landing zone through Terraform and CI/CD pipelines
Configure shared resource hubs, next-generation firewalls, virtual networks, NSGs, and monitoring
Design redundancy, backup, and disaster recovery including multi-region and availability zone strategies
Deliver knowledge transfer sessions to client technical teams
Requirements
What You Bring
Must-Have:
7+ years in cloud infrastructure design and implementation
5+ years hands-on with Microsoft Azure
Proven delivery of enterprise Azure landing zones, design through deployment
Deep Azure networking: Virtual WAN, ExpressRoute, DNS, NSGs, firewalls
Terraform-based IaC with CI/CD pipeline experience
Strong Azure governance, security, and compliance knowledge
Next-generation firewall experience, Palo Alto preferred
Client-facing communication and stakeholder management skills
Nice-to-Have:
Azure certifications (AZ-305, AZ-104 or equivalent)
Azure Backup and Azure Site Recovery implementations
Azure Policy and cost management tooling
Compliance framework exposure (SOC 2, ISO 27001, HIPAA)
Scripting in PowerShell, Python, or Bash
Technical Environment:
Microsoft Azure, Terraform, CI/CD (Azure DevOps or GitHub Actions), Virtual WAN, ExpressRoute, Palo Alto NGFW, Entra ID, Azure Monitor
What Success Looks Like:
A fully documented, deployed, and monitored enterprise landing zone within 8 weeks
Governance, security, and DR frameworks the client team can operate without you
Clean knowledge transfer to client engineering teams