Role Description The Cloud Architect is responsible for the enterprise cloud governance framework, ensuring all development adheres to architecture, security and compliance standards. These responsibilities include driving the evolution of the cloud platform, defining the roadmap for services and applications built upon it. This position is full-time remote. Selected candidate must reside in North Carolina and be willing to travel to the home office (Morrisville, NC) for onsite team meetings as needed. Responsibilities & Duties - Cloud Architecture Design and Governance - Own and evolve the enterprise Microsoft Azure cloud architecture and integrated data platforms (e.g., Databricks). - Establish and enforce architectural patterns, reference designs, and enterprise standards for all cloud development. - Define and maintain enterprise naming standards, tagging strategies, and subscription management models to support governance, cost transparency, and operational efficiency. - Govern the design and structure of Infrastructure as Code (IaC) modules and templates (Terraform). - Conduct regular architectural reviews to ensure solutions align with established standards and strategic goals. - Cloud Strategy and Roadmap Development - Partner with business and platform leaders to translate requirements into a strategic cloud vision. - Develop and own the multi-year enterprise cloud strategy and technology roadmap. - Align the cloud roadmap with enterprise application modernization, data strategy, and digital transformation initiatives. - Evaluate emerging Azure services and industry trends to drive platform innovation and optimization. - Cloud Security, Compliance, and Financial Governance (FinOps) - Own the architectural design of the cloud security framework, ensuring continuous regulatory compliance. - Establish and govern Azure policies and security controls for continuous compliance and risk mitigation. - Partner with cybersecurity and compliance teams to support audits, risk assessments, and regulatory reporting related to cloud services. - Define and implement a FinOps strategy, including standards for cost optimization, budgeting, and forecasting. - Technical Leadership and Stakeholder Collaboration - Communicate architectural designs and strategic decisions to executive leadership and key stakeholders. - Serve as the chief technical authority on cloud architecture, collaborating with platform, security, and application teams to ensure alignment. - Develop and deliver cloud architecture guidance, standards, and best practices through documentation and presentations. - Provide architectural oversight, technical leadership, and mentorship to the cloud engineering team. Qualifications - Bachelor’s degree in computer science or related field. - At least five (5) years of experience working as a Cloud Architect with direct involvement and responsibilities architecting a Microsoft Azure cloud platform, preferably in a healthcare setting. - At least one of the following (or comparable) technical certifications is required: - Azure Solutions Architect Expert (AZ-305) - Azure Security Engineer Associate (AZ-500) - Identity and Access Administrator Associate (SC-300) - ISC2 Certified Cloud Security Professional (CCSP) - Databricks Certified Associate Architect for Apache Spark Requirements - Enterprise-scale Microsoft Azure Landing Zones. - Azure native security and governance tools, including Azure Policy, Defender for Cloud, and Microsoft Entra ID. - Infrastructure as Code (IaC) with Terraform. - Cloud-native data platforms (e.g., Azure Databricks). - Cloud FinOps best practices. - DevOps, Git and CI/CD best practices. - Architectural artifacts & documentation (e.g., technical specs, policies, procedures, architecture diagrams). - Agile methodology and tools. - HIPAA/HITECH compliance in cloud architectures. - Technical leadership skills. - Communication and organizational skills. - Ability to work independently and in a team setting. - Experience working with healthcare infrastructure. Benefits - Medical, Dental, Vision, Life, Long Term Disability. - Generous retirement savings plan. - Flexible work schedules including hybrid/remote options. - Paid time off including vacation, sick leave, holiday, management leave. - Dress flexibility. Salary Range $116,011-$147,914/Annually. Exact compensation will be determined based on the candidate's education, experience, external market data and consideration of internal equity. Employment Conditions Employment for this position is contingent upon a satisfactory background and credit check, which will be performed after acceptance of an offer of employment and prior to the employee's start date.

Role Description Zocdoc’s greatest asset is its people. As a Staff Cloud IAM Engineer on our Corporate Cloud Engineering team within Corporate IT, you’ll make it possible for every Zocdoc’r to work securely and efficiently. - Own the technical vision and strategy for identity and access management across our corporate stack, with Microsoft Entra ID, enterprise SSO/SCIM, and our SaaS and AI platforms at the center. - Design scalable identity governance that keeps teams productive while reducing risk. - Lead cross‑functional initiatives that make secure, least‑privilege access the default, not an afterthought. - Play a key role in the reliability and security of our core corporate infrastructure. - Help ensure our AWS/Azure/GCP environments, on‑prem VMware footprint, and foundational services are patched, healthy, and well‑run. Qualifications - Deeply fluent in Microsoft Entra ID (Identity Governance, Access Packages), SSO/SCIM standards (SAML, OIDC), and custom integrations for a diverse SaaS and AI estate. - Excited to scale AI platforms like OpenAI and Anthropic through thoughtful RBAC, tiered spend/quota governance, and secure, consumable access patterns. - Comfortable working the access queue to identify patterns, with a relentless focus on building the automation and self-service tools that retire repetitive manual work. - A cross-functional partner who models Staff-level behaviors by mentoring engineers, aligning stakeholders, and setting the technical standards that drive adoption across the organization. - An outcome-driven leader who brings humility, curiosity, and a sense of humor to solving challenging problems in a growing, high-scale environment. Requirements - Track record leading identity or enterprise platform initiatives at a multi-thousand-employee organization, with measurable outcomes (toil eliminated, audit findings reduced, time-to-access shortened, or comparable business metrics). - Demonstrated ability to drive adoption of standards across teams through RFCs, design reviews, and architectural pattern-setting. - 10+ years in IT/Systems (mid-to-large scale) as a "player-coach" with a proven track record of defining adoption-ready standards and writing the design docs/RFCs that become the organization’s source of truth. - Deep expertise in Microsoft Entra ID (Conditional Access, PIM, Identity Governance) and the ability to own the entire identity lifecycle, including onboarding/offboarding flows and permission hygiene. - Extensive experience delivering SSO and SCIM integrations (SAML, OIDC/OAuth) across a massive SaaS estate, with a focus on replacing manual access work with programmatic or self-service provisioning. - A systems-thinker comfortable being measured by toil eliminated; expert at automating workflows across IdP, HRIS (Workday), and SaaS platforms via APIs to remove repetitive manual tasks. - Experience governing IAM, spend, and quotas for AI platforms (OpenAI, Anthropic) and fluency in using Generative AI tools (Claude Code, LLMs) to accelerate engineering velocity. - Experience in audit-sensitive environments (HITRUST/SOC2 evidence collection) and owning the security hygiene of the identity certificate and token lifecycle. - Familiarity with the broader endpoint and security ecosystem, including Intune, Jamf, Google Workspace, and CrowdStrike, to ensure a cohesive identity posture across all platforms. - Hands-on experience with AWS infrastructure and networking primitives (VPC, DNS, Load Balancing) to debug connectivity, utilizing AWS CDK, Terraform, Python, or PowerShell for automation. Benefits - Remote Base Salary Range: $180,000 — $270,000 USD.

• Design, deploy, and manage core Azure infrastructure components to support mission-critical workloads. • Architect and implement robust Identity and Access Management (IAM) strategies within Azure (Entra ID) to ensure least-privilege access and secure cross-team collaboration. • Implement and maintain security controls and governance aligned with frameworks such as CMMC, FedRAMP, ISO 27001, or SOC 2. • Build and optimize reusable infrastructure as code (IaC) components and templates for consistent, secure, and scalable deployments. • Define and implement standardized deployment patterns and workflows for production workloads. • Collaborate with other teams (IT, InfoSec, Networking) to understand their requirements and translate them into secure, scalable Azure solutions. • Identify operational bottlenecks and architect innovative solutions that maximize system availability, reliability, and security. • Implement and manage Zero Trust Network Access (ZTNA) solutions to secure remote access and internal communications.

• Design, implement, and manage scalable cloud infrastructure solutions. • Support cloud migration, deployment, and modernization initiatives. • Build and maintain secure, highly available, and cost-effective cloud environments. • Automate infrastructure provisioning using Infrastructure as Code (IaC) tools. • Collaborate with DevOps, security, application, and infrastructure teams to support cloud operations. • Monitor system performance, troubleshoot issues, and optimize cloud resources. • Implement cloud security best practices, governance, and compliance controls. • Manage CI/CD pipelines and deployment automation processes. • Provide technical leadership and mentor junior engineering team members. • Create technical documentation, architecture diagrams, and operational procedures.