Azure IoT Solutions Architect

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Azure IoT Solutions Architect based in United States.

• Design and lead secure, end-to-end IoT architectures spanning connected products, embedded and edge systems, gateways, networks, Azure services, APIs, applications, data platforms, and operational support.
• Define reusable architecture patterns for device onboarding, telemetry ingestion, command and control, digital services, remote diagnostics, lifecycle management, and industrial connectivity.
• Architect Azure IoT solutions using services such as Azure IoT Hub, Device Provisioning Service, IoT Edge, Event Hubs, Functions, Stream Analytics, storage, monitoring, and integration services.
• Guide integration with manufacturing and operational technology environments, including industrial gateways, plant networks, MQTT, AMQP, HTTPS, and OPC UA.
• Evaluate scalability, resilience, latency, availability, data retention, regional deployment, disaster recovery, and cost requirements for global IoT solutions.
• Embed security-by-design, Zero Trust, least privilege, secure provisioning, device identity, certificate management, encryption, secure updates, logging, monitoring, and incident response throughout the architecture.
• Lead threat modeling, attack-surface analysis, architecture risk assessments, security reviews, and vulnerability management for connected products and supporting services.
• Define and review Azure-native security controls involving Entra ID, managed identities, Key Vault, Azure Policy, Defender for Cloud, Defender for IoT, Microsoft Sentinel, network security, and centralized monitoring.
• Lead compliance readiness for connected products by translating regulatory and cybersecurity requirements into technical controls, development standards, acceptance criteria, evidence, and operational processes.
• Establish practices for SBOM management, third-party component governance, vulnerability intake, coordinated vulnerability disclosure, remediation, security advisories, and secure software updates.
• Architect secure Azure environments, including landing zones, subscriptions, network segmentation, private connectivity, identity, logging, governance, and Infrastructure as Code using Bicep, ARM, Terraform, or equivalent tools.
• Define CI/CD and DevSecOps controls for cloud infrastructure, applications, edge modules, firmware interfaces, configuration, automated testing, security scanning, and release approvals.
• Maintain IoT, product-security, and regulatory-readiness roadmaps while prioritizing work according to business value, product risk, regulatory deadlines, and delivery dependencies.
• Participate in Agile ceremonies, architecture governance, design workshops, backlog refinement, sprint planning, and release-readiness activities.
• Act as a trusted advisor to engineering, firmware, infrastructure, cybersecurity, manufacturing, operations, product, legal, compliance, and executive stakeholders.
• Communicate complex architecture, security, and regulatory topics clearly while mentoring architects, engineers, and developers on secure IoT engineering practices.

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 8+ years of experience in cloud architecture, infrastructure, software architecture, cybersecurity, or related technical leadership roles.
• 5+ years of hands-on experience designing and delivering IoT, connected-product, edge, or industrial technology solutions, preferably within manufacturing environments.
• Demonstrated experience designing Azure IoT solutions using Azure IoT Hub, Device Provisioning Service, IoT Edge, event and messaging services, data integration, monitoring, and security capabilities.
• Strong understanding of IoT and industrial communication protocols, including MQTT, AMQP, HTTPS, OPC UA, device gateways, intermittent connectivity, and store-and-forward architectures.
• Strong knowledge of device identity, X.509 certificates, PKI, secure provisioning, cryptography, key management, secure update mechanisms, and product vulnerability management.
• Experience with the EU Cyber Resilience Act and an understanding of manufacturer obligations, cybersecurity requirements, vulnerability handling, support periods, technical documentation, reporting, and conformity-assessment readiness.
• Experience applying secure development lifecycle practices, threat modeling, risk assessment, SBOM management, coordinated vulnerability disclosure, and product security incident response.
• Strong knowledge of Azure networking, Entra ID, governance, observability, Infrastructure as Code, CI/CD, and DevSecOps practices.
• Proven ability to work in Agile environments and translate architecture, security, and regulatory requirements into delivery priorities.