Azure Cloud Foundation Engineer (Landing Zones, Governance)

We are hiring an experienced Azure Cloud Platform Engineer to manage and strengthen an enterprise Azure environment. for our client in NJ/PA border. This is an Azure platform, landing zone, and governance role, not an application development or pipeline-only Dev Ops position. You will work at the tenant and subscription level, owning governance, infrastructure automation, access controls, networking, security, and platform reliability. What You’ll Own Azure tenant, management groups, subscriptions, and resource organization Azure Landing Zone standards, policies, guardrails, tagging, and naming controls New subscription and workload onboarding Terraform infrastructure, reusable modules, and code standards Git Hub Actions pipelines for Azure infrastructure deployments Azure RBAC and least-privilege access Azure networking and firewall controls Azure Monitor, Log Analytics, incident support, and root-cause analysis Cloud security remediation and compliance support Reusable platform patterns for enterprise application teams What We’re Looking For 5+ years of hands-on Microsoft Azure experience Strong production experience managing Azure tenants, management groups, and subscriptions Direct experience with Azure Policy, RBAC, and enterprise governance Hands-on Terraform and Git Hub Actions experience Strong Azure networking and platform troubleshooting skills Experience supporting cloud security, compliance, monitoring, and remediation Clear platform documentation and runbook experience Preferred Azure Landing Zones Azure Firewall Terraform module development Cloud governance and guardrail implementation Experience supporting multiple enterprise development teams Best fit: An Azure Platform, Cloud Foundation, Landing Zone, or Cloud Governance Engineer who has supported a centralized Azure platform across multiple subscriptions and application teams. Not a fit: Candidates whose Azure experience is primarily application deployment, basic resource provisioning, migrations, system administration, or CI/CD pipelines without tenant-level governance ownership. In-person Interview. No Relocation, only locals within commutable distance