Azure Landing Zone Lead
Lumiere Systems · Columbus, OH
—
Jul 2, 2026
Columbus, OH
Jul 20, 2026
What this job asks for AI summary
This role centers on architecting and deploying Azure Landing Zones using Terraform and the Azure Landing Zone Accelerator, including custom management group hierarchies, subscription vending, and policy-as-code. The work spans hub-and-spoke network design, Entra ID and IAM configuration, CI/CD pipeline integration, and day-to-day multi-subscription governance. It suits an experienced Azure infrastructure architect comfortable translating enterprise governance requirements directly into deployable Terraform modules for regulated environments.
Senior level · National
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $138,970 (middle half $107,524–$175,762).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
The posting has no title-level seniority word, but the role is framed as 'Lead/Architect' and the requirements describe deep, expert-level ownership of Azure Landing Zone design — consistent with a Senior band.
SOC classification is Medium confidence: the role primarily BUILDS infrastructure-as-code (Terraform modules, policy-as-code, CI/CD pipelines) which maps to Software Developers (15-1252), but the strong cloud-architecture and governance framing could also fit 15-1299 (Computer Occupations, All Other) for an Architect/Cloud Engineer hybrid.
All skills are treated as hard gates — the entire posting is written as a requirements block with no secondary 'Nice to have' or 'Preferred' section. The posting explicitly labels the ALZ + Terraform combination 'the core, non-negotiable skill'.
'Hub-and-spoke network topology' and 'subscription vending' are named as specific Azure architectural patterns/capabilities rather than generic concepts, and are retained as concrete skills given the explicit, gated framing.
Azure DevOps and GitHub Actions are listed as interchangeable CI/CD pipeline options ('Azure DevOps or GitHub Actions') — captured as one skill with the alternative noted.
Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Azure Landing Zone Accelerator, hub-and-spoke network topology.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.