Cloud Infrastructure Architect

About the Opportunity

JOB SUMMARY

Northeastern University is seeking an experienced Cloud Infrastructure Architect with a strong focus on Microsoft Azure. This hands-on role is responsible for designing, implementing, and optimizing cloud infrastructure solutions that align with the university’s cloud strategy. The ideal candidate will have deep expertise in Azure architecture, governance, security, networking, and automation. You will work closely with cloud engineers, security teams, and application teams to drive cloud adoption, scalability, cost optimization, and security best practices.

This role is hybrid and in the office a minimum of three days a week to facilitate collaboration and teamwork. In-office presence is an essential part of our on-campus culture and allows for engaging directly with staff and students, sharing ideas, and contributing to a dynamic work environment. Being on-site allows for stronger connections, more effective problem-solving, and enhanced team synergy, all of which are key to achieving our collective goals and driving success.

*Applicants must be authorized to work in the United States. The University is unable to work sponsor for this role, now or in the future

MINIMUM QUALIFICATIONS

• Experience: Minimum 7+ years of experience in cloud architecture with a strong focus on Azure infrastructure.

• Azure Expertise: Deep understanding of Azure networking, security, compute, storage, and hybrid connectivity.

• Infrastructure as Code (IaC): Proficiency in Terraform, Bicep, ARM templates, and PowerShell for infrastructure automation.

• Cloud Security & Compliance: Strong knowledge of Azure AD, RBAC, PIM, Conditional Access, Zero Trust Security, and regulatory compliance.

• Cloud Networking: Expert-level experience with VNets, VPNs, ExpressRoute, Azure Load Balancers, and Azure Firewall.

• Cost Optimization: Proven track record in Azure cost governance, Reserved Instances, FinOps, and budget forecasting.

• Monitoring & Incident Response: Experience implementing and managing Azure Monitor, Log Analytics, and Application Insights.

• Certifications:

• • Microsoft Certified: Azure Solutions Architect Expert (AZ-305) – Required.

  • Microsoft Certified: Azure Security Engineer Associate (AZ-500) – Preferred.

  • Microsoft Certified: DevOps Engineer Expert (AZ-400) – Preferred.

 Preferred Qualifications:

• Experience working in multi-cloud environments (Azure & AWS).

• Hands-on experience with Azure Kubernetes Service (AKS) and containerization technologies.

• Familiarity with Azure SQL, CosmosDB, Azure Data Lake, and Azure Synapse Analytics.

• Experience with Zero Trust security models and cloud governance frameworks.

24/7 business continuity:

This role requires occasional availability outside of traditional working hours to address urgent business needs as they arise, including, but not limited to, responding to security incidents, supporting software deployments, resolving software issues or system breaks, and addressing other critical operational requirements. The ideal candidate must be proactive and adaptable, ensuring minimal disruption to business operations by promptly addressing any issues, regardless of time or day. Flexibility and a strong sense of urgency are essential for success in this position.

Other duties as required:

This role requires flexibility in performing duties outside of the primary responsibilities to support evolving business needs. The ideal candidate must be adaptable and willing to take on additional tasks or projects as required, ensuring smooth operations across the organization. This may include stepping in to assist with cross-functional teams, handling unexpected challenges, or contributing to initiatives that support business growth and success. A proactive mindset and the ability to pivot quickly are essential for thriving in this dynamic environment.

KEY RESPONSIBILITIES & ACCOUNTABILITIES

Cloud Architecture & Design 40%

• Design and implement scalable, secure, and resilient Azure cloud architectures that align with Northeastern University’s cloud strategy.

• Develop reference architectures, best practices, and governance frameworks for cloud adoption.

• Define and implement hybrid cloud architectures, integrating on-premises data centers with Azure services.

Cloud Infrastructure & Networking 20%

• Architect and oversee Azure network components, including Virtual Networks (VNets), VPN Gateways, ExpressRoute, Load Balancers, Azure Firewall, and Network Security Groups (NSGs).

• Ensure high availability and performance across cloud workloads through proper network design and resource allocation.

• Drive modernization efforts by leveraging Azure Virtual WAN, Private Link, and hybrid connectivity solutions.

Security & Compliance 20%

• Lead cloud security hardening initiatives, implementing Azure Security Center, Defender for Cloud, Microsoft Sentinel, and Zero Trust security models.

• Establish governance and compliance frameworks to ensure adherence to NIST 800-171, GDPR, HIPAA, and other regulatory requirements.

• Design and implement Azure Identity and Access Management (IAM), including Azure Active Directory (AAD), Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Conditional Access Policies.

Cost Optimization & Governance 20%

• Develop and enforce cost governance strategies, leveraging Azure Cost Management + Billing, Reserved Instances, Spot VMs, and Azure Hybrid Benefit.

• Implement tagging strategies, FinOps methodologies, and cloud cost optimization best practices.

• Work closely with finance teams to provide cost forecasts, budget controls, and resource efficiency recommendations.

Automation & Infrastructure

• Define Infrastructure as Code (IaC) best practices using Terraform, Bicep, and ARM templates to automate cloud deployments.

• Oversee CI/CD integration for infrastructure automation using Azure DevOps, GitHub Actions, or Terraform Cloud.

• Implement configuration management and policy enforcement using Azure Policy, Azure Blueprints, and Desired State Configuration (DSC).

Position Type

Information Technology

Additional Information

Northeastern University considers factors such as candidate work experience, education and skills when extending an offer.  

All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, religion, color, national origin, age, sex, sexual orientation, disability status, or any other characteristic protected by applicable law.

Compensation Grade/Pay Type:

114S

Expected Hiring Range:

$129,010.00 - $187,060.00

With the pay range(s) shown above, the starting salary will depend on several factors, which may include your education, experience, location, knowledge and expertise, and skills as well as a pay comparison to similarly-situated employees already in the role. Salary ranges are reviewed regularly and are subject to change.