Azure Public Cloud Senior Consultant

About Ensono: Ensono is a premier, hyper-growth global technology advisory engine and master-certified multi-cloud managed service provider driven by a relentless mission to optimize enterprise infrastructure and unleash clients to achieve world-shaping business outcomes. Acting as a trusted cross-platform technology advisor, Ensono empowers highly regulated corporate landscapes to keep up with continuous market changes and embrace structural digital innovations safely. Operating with thousands of multi-certified professionals worldwide, Ensono maintains a distinguished reputation across hybrid IT ecosystems, optimizing infrastructure resilience for sovereign enterprise operations.

Position Overview

We are seeking a highly sophisticated, security-minded Azure Public Cloud Senior Consultant to join our core Cloud Engineering and Professional Services division in a full-time remote capacity within the United States. In this high-visibility, customer-facing technical leadership seat, you will act as a primary security architect and implementation authority, owning the end-to-end design and structural hardening of enterprise Microsoft Azure solutions. Moving far beyond traditional, non-defensive cloud templates, you will lead custom design workshops with Fortune 500 stakeholders, map declarative compliance guardrails, and build hardened corporate landing zones from the ground up. This role demands a seasoned consultant who holds an active Azure Solutions Architect Expert credential and thrives on translating complex risk parameters into scalable, automated infrastructure assets.

Key Responsibilities

• Secure Cloud Architecture Design: Plan, structure, and model production-grade cloud-native architectures natively inside Microsoft Azure, ensuring security controls and infrastructure hardening serve as foundational engineering benchmarks.
• Azure Landing Zone Implementation: Deploy scalable corporate landing zones completely aligned with enterprise tenant governance, hybrid identity parameters, and multi-layered access perimeters.
• Network Perimeter Segmentation: Configure and secure technical data connectivity paths, configuring enterprise-scale virtual networks (VNets), dedicated ExpressRoute lines, private endpoint gateways, and network peering fabrics.
• Declarative Governance Controls: Manage and enforce programmatic cloud security policies, management group hierarchies, compliance benchmarks, and automated configuration baselines using ARM templates (JSON).
• Automation & Maintenance Scripting: Program clear system configuration utilities, automation macros, and cloud diagnostic scripts written natively in PowerShell.
• Workload Migration & DR Management: Coordinate secure modernization tracks and high-availability workload migrations into cloud containers, leveraging Azure Site Recovery (ASR) for data protection and disaster recovery loops.
• Technical Leadership & Consulting: Act as the principal technical security lead within assigned customer delivery cells, conducting peer reviews of active cloud designs and mentoring junior consultants on infrastructure security trends.

Required Skills & Qualifications

• 7+ years of verified professional history running enterprise IT infrastructure, cloud engineering, automation tracking, or network defense architectures.
• 3+ years of direct, hands-on professional consulting experience designing, implementing, and delivering complex public cloud solutions natively within the Microsoft Azure services tree.
• Possession of an active, verified Microsoft Azure Solutions Architect Expert professional credential.
• Demonstrated experience configuring enterprise cloud components, with masterly command over Azure AD (Entra ID), Azure policy definitions, and hybrid directory sync blocks.
• Proven background operating within consulting, professional services agency, or client-facing product delivery cells, showing strong capability to present technical concepts to non-technical stakeholders.
• Outstanding verbal and written communication mechanics, with absolute professional fluency in English to drive cross-team alignments.
• Regulatory Context: Full-time operational parameters open to qualified consultants permanently located anywhere within the United States. Due to rigid federal and client regulatory restrictions, candidates must hold US Citizenship or Green Card status, and successfully pass specified background checks.

Preferred Strategic Indicators (Nice to Have)

• Possession of professional secondary credentials, specifically the Microsoft Azure Security Engineer Associate (AZ-500) or Microsoft Azure DevOps Engineer Expert certifications.
• Practical experience extending security controls inside automated continuous integration and continuous deployment pipelines via Azure DevOps or GitHub Actions.
• Familiarity deploying and securing containerized microservices architectures inside Azure Kubernetes Service (AKS) environments.
• Prior background providing infrastructure consultancy across heavily regulated sectors, such as banking networks, healthtech groups, or public sector SLED platforms.

What We Offer

• The exceptional professional canvas to directly direct, architect, and secure the cloud-native infrastructures backing prominent global enterprises.
• Highly attractive annual compensation structures estimated in good faith between $110,000 – $163,000 USD, supplemented by eligibility under our Associate Equity Appreciation Program.
• Profound work-from-home remote parameters offering total lifestyle autonomy and complete geographical independence across United States tech nodes.
• Access to an unlimited paid days off program, enabling deep personal scheduling flexibility and exceptional work-life balance.
• Comprehensive health protections including three modern health plan options, immediate 401(k) company match programs, dental protection, vision coverages, and specialized family forming benefits covering fertility, adoption, or surrogacy financial reimbursements.