Lead Cloud Engineer - Azure Cloud Migration

Job Title – Lead Cloud Engineer – Azure Cloud Migration Location - Remote (United States) Experience - 10+ years Employment Type – Contract-to-Hire Duration – Dec 2026 – Feb 2028* Feb2028 is end of this program, if full time offer will be extended it could be prior to program termination CitiusTech is a leading digital and enterprise AI company for healthcare and life sciences organizations. We enable 140+ enterprises to build a human-first ecosystem that is efficient, effective, and equitable. Leveraging deep domain expertise and next-generation technologies including AI, Cloud, Data, and Intelligent Automation, we assist our clients to realize their vision, accelerate transformation, and achieve business outcomes. With 7,700+ healthcare technology professionals worldwide, CitiusTech powers digital innovation, business transformation, and industry-wide convergence through next-generation technologies, solutions, and products. Why CitiusTech Healthcare isn't just another industry for us. It's our singular focus. For 21+ years, we have combined technology and domain expertise to shape better healthcare outcomes. As part of CitiusTech, you will build future-ready skills while becoming an expert in a domain where innovation creates real human impact. Here's an opportunity to be part of that journey. Position Summary We are hiring a Lead Cloud Migration Engineer to execute a multi-wave data center migration to Microsoft Azure for a US healthcare payer. You will partner with the program's Cloud Architect and own the hands-on delivery: build, test, cut over, and stabilize every migrated application. The migration runs as a factory: each application moves through the same stages, from discovery and design through build, testing, cutover, and hypercare, with an approval gate at each step. The Cloud Architect sets the target design. You turn that design into running infrastructure through code, lead the migration team through execution, and are accountable for the technical quality of every migration you deliver. This is a hands-on lead role, not an advisory one. You will write the Bicep, run the replication, lead the cutover night, and make the call on rollback within the agreed time box. The work happens in a regulated healthcare environment (HIPAA and HITRUST), where evidence, change control, and precision matter as much as speed.

Key Responsibilities

Discovery and migration design (with the Cloud Architect) Lead technical discovery for each application: confirm scope, servers, and owners, and document dependencies such as shared SQL instances, integration endpoints, certificates, and service accounts. Turn the Cloud Architect's target design into an application migration playbook: current and target architecture, migration approach, test approach, and rollback plan. Assess the impact of platform changes on each application, for example the move from on-premises Active Directory to Entra ID, and propose practical options. Infrastructure as code and environment build Author and maintain the Bicep module library used for every migrated workload. All infrastructure is deployed as code through Azure DevOps pipelines; nothing is built by hand in production. Build target environments that follow the landing zone standards: subscriptions and resource groups, VNets and subnets, NSGs, private endpoints, load balancers, DNS, and firewall rules. Apply naming, tagging, RBAC, and Azure Policy standards in every template, working with the client's Cloud Platform team, which owns the landing zone. Onboard each workload to security, monitoring, backup, and privileged access before testing begins. Migration execution and cutover Run Azure Migrate for rehost migrations: configure replication, monitor its health, run test failovers, and confirm readiness before each approval gate. Lead production cutover nights: run the runbook, direct the technical team, make the rollback decision within the agreed time box, and confirm application health before declaring success. Validate DNS cutover, certificate continuity, IP allowlists, firewall rules, and F5 or load balancer changes in every cutover. Coordinate shared SQL instance migrations, including joint cutovers across several applications, and validate data integrity afterward. Support replatformed and net-new deployments, including containerized workloads on AKS. Testing, approvals, and hypercare Coordinate non-production, integration, performance, and user acceptance testing with the QA lead and application teams; track defects to closure. Produce the technical evidence for each approval gate and CAB submission: validated Bicep, network diagram, security controls mapped, rollback tested, and DR evidence. Make sure every workload meets backup and disaster recovery requirements, with RPO and RTO validated. Own the hypercare window after each go-live: monitor, resolve issues quickly, and hand over to steady-state operations. Leadership and continuous improvement Act as the main technical escalation point for the migration team and QA during testing, cutover, and hypercare. Lead a technical retrospective after each wave and feed the lessons into the playbook template, Bicep library, and runbooks. Mentor cloud engineers on Bicep, Azure Migrate, and runbook practice, including an offshore delivery team. Work with the managed service provider and application vendors when they are needed for a migration. Keep migration status, risks, and issues current in Azure DevOps, and support audit and compliance documentation.

Qualifications

Required 10+ years in enterprise infrastructure or application migration, including at least 5 years hands-on with Microsoft Azure. AWS or GCP experience . Delivered at least two end-to-end Azure data center migration programs, from target environment build through production cutover and hypercare exit. Personally executed production cutovers with Azure Migrate, including replication failover, DNS cutover, and post-migration application validation. Wrote Bicep or ARM modules for multi-application Azure environments, not just consumed existing ones, and deployed them through Azure DevOps pipelines. Strong Azure networking: hub-and-spoke or Virtual WAN, ExpressRoute and VPN, Azure Firewall, NSGs, private endpoints, and private DNS. Migrated or managed SQL Server in Azure, including shared instances and data validation after migration. Working knowledge of Entra ID, RBAC, and Azure Policy, and how identity changes affect migrated workloads (Kerberos, service accounts, domain join). Worked in a regulated environment such as HIPAA, HITRUST, PCI-DSS, or FedRAMP, and understands the difference between "deployed in Azure" and "compliant in Azure". Experience in healthcare. Preferred Health plan or payer applications, such as claims, enrollment, care management, or analytics. Factory-style, wave-based migration programs with formal approval gates and CAB. Entra ID Domain Services, Azure Kubernetes Service, or CyberArk in hybrid environments. Azure Backup, Azure Site Recovery, and DR testing. F5 load balancers and Palo Alto firewalls on the on-premises side. Working with offshore delivery teams. Experience supporting health plan or payer applications (claims, enrollment, care management, analytics) Familiarity with migration factory or factory‑style delivery models Exposure to middleware, databases, or integration technologies Experience with IT service management or change management processes Azure certifications or migration tooling experience Certifications (preferred) Azure Administrator Associate (AZ-104) Azure Solutions Architect Expert (AZ-305) DevOps Engineer Expert (AZ-400) Worked in a regulated environment (HIPAA, PCI-DSS, FedRAMP, or equivalent) — understands the difference between 'deployed in Azure' and 'compliant in Azure'. Experience working in healthcare Soft Skills Strong organizational and execution skills Ability to manage multiple workloads across parallel migration waves Calm and effective communication during high‑pressure cutover events Strong documentation skills Employment Type – Contract (with intent for full-time) Duration – December 2026 – February 2028 *Feb2028 is end of this program, if full time offer will be extended it could be prior to program termination Compensation - $85-$93/hr rate shown for contract work portion only at this time Life at CitiusTech We focus on building highly motivated engineering teams and thought leaders with an entrepreneurial mindset, centered on our core values of Passion, Respect, Openness, Unity, and Depth (PROUD) of knowledge. Our success lies in creating a fun, transparent, non-hierarchical, diverse work culture that focuses on continuous learning and work-life balance. Rated by our employees as the ‘Great Place to Work for’ according to the Great Place to Work survey. We offer you a comprehensive set of benefits to ensure that you have a long and rewarding career with us. Our EVP Be You Be Awesome is our EVP and it reflects our continuing efforts to create CitiusTech as a great place to work where our employees can thrive, both personally and professionally. It encompasses the unique benefits and opportunities we offer to support your growth, well-being, and success throughout your journey with us and beyond. Together with our clients, we are solving some of the greatest healthcare challenges and positively impacting human lives. Welcome to the world of Faster Growth, Higher Learning, and Stronger Impact. Join CitiusTech. Be You. Be Awesome. Disclosures: - This posting complies with applicable pay transparency laws in states such as California, Colorado, New York, New Jersey, Illinois, and others. CitiusTech is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.