Job Summary:
Lumiere Systems is seeking an Azure Landing Zone Lead/Architect. The role involves deploying Azure Landing Zones using Terraform, designing network topologies, and ensuring governance and compliance in cloud environments.
Responsibilities:
โข Hands-on experience deploying Azure Landing Zones using the Azure Landing Zone Accelerator (ALZ) with Terraform โ designing, provisioning, and iterating on custom management group hierarchies, subscription vending, and policy-as-code deployments (this is the core, non-negotiable skill).
โข Proven experience designing hub-and-spoke network topologies โ centralized connectivity subscription, hub-based egress (no direct internet from spokes), and spoke-to-hub peering for workload isolation.
โข Deep working knowledge of Microsoft's Cloud Adoption Framework (CAF), with the ability to design multi-tier management group structures beyond the CAF default (e.g., segmenting workloads by environment, data sensitivity classification, vendor/SaaS ownership, and decommissioning lifecycle) and translate them into deployable Terraform modules.
โข Strong Azure operational and administration experience โ subscription/resource group management, RBAC, quota and policy governance, cost control, and day-2 operations across a multi-subscription environment.
โข Hands-on experience with Azure Entra ID (Azure AD) and IAM โ conditional access, role assignments, PIM, service principals/managed identities, and federated identity for workload access.
โข Proficiency with Terraform state management, module design, and CI/CD pipeline integration (Azure DevOps or GitHub Actions) for repeatable, versioned landing zone deployments.
โข Experience with application-tier resilience patterns within a landing zone โ e.g., Blue/Green (LIVE/staging) subscription or resource group structures with load-balanced, zero-downtime traffic switching.
โข Ability to work directly with client architecture teams to translate whiteboard-level segmentation and governance decisions into a deployable Terraform-based landing zone, supporting regulated/enterprise environments.
Qualifications:
Required:
โข Hands-on experience deploying Azure Landing Zones using the Azure Landing Zone Accelerator (ALZ) with Terraform โ designing, provisioning, and iterating on custom management group hierarchies, subscription vending, and policy-as-code deployments (this is the core, non-negotiable skill).
โข Proven experience designing hub-and-spoke network topologies โ centralized connectivity subscription, hub-based egress (no direct internet from spokes), and spoke-to-hub peering for workload isolation.
โข Deep working knowledge of Microsoft's Cloud Adoption Framework (CAF), with the ability to design multi-tier management group structures beyond the CAF default (e.g., segmenting workloads by environment, data sensitivity classification, vendor/SaaS ownership, and decommissioning lifecycle) and translate them into deployable Terraform modules.
โข Strong Azure operational and administration experience โ subscription/resource group management, RBAC, quota and policy governance, cost control, and day-2 operations across a multi-subscription environment.
โข Hands-on experience with Azure Entra ID (Azure AD) and IAM โ conditional access, role assignments, PIM, service principals/managed identities, and federated identity for workload access.
โข Proficiency with Terraform state management, module design, and CI/CD pipeline integration (Azure DevOps or GitHub Actions) for repeatable, versioned landing zone deployments.
โข Experience with application-tier resilience patterns within a landing zone โ e.g., Blue/Green (LIVE/staging) subscription or resource group structures with load-balanced, zero-downtime traffic switching.
โข Ability to work directly with client architecture teams to translate whiteboard-level segmentation and governance decisions into a deployable Terraform-based landing zone, supporting regulated/enterprise environments.
Company:
With years of experience in helping businesses grow, weโve mastered the skills of understanding business requirements irrespective of the industry they serve. Founded in 2022, the company is headquartered in Houston, Texas, US, , with a team of 501-1000 employees. The company is currently Late Stage.