Sr. Azure Cloud Architect
- Location
- Milpitas, CA
- Employment
- Full Time
- Work model
- On-Site
- Level
- Senior
- H-1B history
- 85 approvals (FY2023)
- Posted
Skills
About this role
To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology. Group/Division KLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.
What You'll Do
In this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise. KLA is seeking a hands-on Senior Azure Cloud Architect to join the Cloud & AI Platform organization. This role is responsible for designing, implementing, securing, and optimizing enterprise solutions on Microsoft Azure, while supporting hybrid integration with on-premises infrastructure and other cloud platforms. The successful candidate will combine strong Azure architecture knowledge with practical engineering experience across cloud networking, identity, security, automation, platform services, Kubernetes, monitoring, and cost optimization. The architect will work closely with Infrastructure, Cybersecurity, Application Development, Data, Engineering, and Business teams to deliver scalable, resilient, secure, and supportable cloud solutions.
Key Responsibilities
Design, implement, and support scalable, highly available, resilient, and secure solutions using Microsoft Azure IaaS and PaaS services. Design and maintain Azure landing-zone capabilities, including management-group and subscription organization, Azure Policy, role-based access control, tagging, resource standards, and governance controls Lead and support Azure migration and modernization activities, including re-hosting, re-platforming, refactoring, and integration of on-premises workloads Architect Azure networking solutions using Virtual Networks, subnets, network security groups, route tables, load balancers, Private Link, Private Endpoints, Azure Firewall, VPN Gateway, ExpressRoute, and DNS services Design network segmentation and micro-segmentation patterns aligned with Zero Trust principles, workload isolation requirements, and approved traffic flows Implement identity-first security using Microsoft Entra ID, managed identities, RBAC, least-privilege access, Privileged Identity Management, Conditional Access, Key Vault, and secrets-management practices Develop and maintain Infrastructure as Code using Terraform and Azure Bicep/ARM templates, with reusable modules, source control, peer review, and automated validation Architect and support Azure Kubernetes Service, containerized workloads, registries, ingress, workload identity, policy enforcement, monitoring, and platform lifecycle activities Configure and support Azure resources including virtual machines, storage accounts, web applications, databases, integration services, AI resources, and platform services Implement monitoring, logging, alerting, and operational visibility using Azure Monitor, Log Analytics, Application Insights, Defender for Cloud, and Microsoft Sentinel integrations. Optimize Azure services for availability, reliability, performance, security, and cost efficiency; support tagging, budgets, utilization reviews, and FinOps practices Support Azure AI and Azure OpenAI solutions by applying approved identity, networking, data-protection, logging, and governance patterns Participate in architecture reviews, security reviews, threat assessments, disaster-recovery planning, operational-readiness reviews, and production troubleshooting Create and maintain architecture