Azure IoT Solutions Architect

Accountabilities

• • Design and lead secure, end-to-end IoT architectures spanning connected products, embedded and edge systems, gateways, networks, Azure services, APIs, applications, data platforms, and operational support.
  • Define reusable architecture patterns for device onboarding, telemetry ingestion, command and control, digital services, remote diagnostics, lifecycle management, and industrial connectivity.
  • Architect Azure IoT solutions using services such as Azure IoT Hub, Device Provisioning Service, IoT Edge, Event Hubs, Functions, Stream Analytics, storage, monitoring, and integration services.
  • Guide integration with manufacturing and operational technology environments, including industrial gateways, plant networks, MQTT, AMQP, HTTPS, and OPC UA.
  • Evaluate scalability, resilience, latency, availability, data retention, regional deployment, disaster recovery, and cost requirements for global IoT solutions.
  • Embed security-by-design, Zero Trust, least privilege, secure provisioning, device identity, certificate management, encryption, secure updates, logging, monitoring, and incident response throughout the architecture.
  • Lead threat modeling, attack-surface analysis, architecture risk assessments, security reviews, and vulnerability management for connected products and supporting services.
  • Define and review Azure-native security controls involving Entra ID, managed identities, Key Vault, Azure Policy, Defender for Cloud, Defender for IoT, Microsoft Sentinel, network security, and centralized monitoring.
  • Lead compliance readiness for connected products by translating regulatory and cybersecurity requirements into technical controls, development standards, acceptance criteria, evidence, and operational processes.
  • Establish practices for SBOM management, third-party component governance, vulnerability intake, coordinated vulnerability disclosure, remediation, security advisories, and secure software updates.
  • Architect secure Azure environments, including landing zones, subscriptions, network segmentation, private connectivity, identity, logging, governance, and Infrastructure as Code using Bicep, ARM, Terraform, or equivalent tools.
  • Define CI/CD and DevSecOps controls for cloud infrastructure, applications, edge modules, firmware interfaces, configuration, automated testing, security scanning, and release approvals.
  • Maintain IoT, product-security, and regulatory-readiness roadmaps while prioritizing work according to business value, product risk, regulatory deadlines, and delivery dependencies.
  • Participate in Agile ceremonies, architecture governance, design workshops, backlog refinement, sprint planning, and release-readiness activities.
  • Act as a trusted advisor to engineering, firmware, infrastructure, cybersecurity, manufacturing, operations, product, legal, compliance, and executive stakeholders.
  • Communicate complex architecture, security, and regulatory topics clearly while mentoring architects, engineers, and developers on secure IoT engineering practices.

  Requirements

  • Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
  • 8+ years of experience in cloud architecture, infrastructure, software architecture, cybersecurity, or related technical leadership roles.
  • 5+ years of hands-on experience designing and delivering IoT, connected-product, edge, or industrial technology solutions, preferably within manufacturing environments.
  • Demonstrated experience designing Azure IoT solutions using Azure IoT Hub, Device Provisioning Service, IoT Edge, event and messaging services, data integration, monitoring, and security capabilities.
  • Strong understanding of IoT and industrial communication protocols, including MQTT, AMQP, HTTPS, OPC UA, device gateways, intermittent connectivity, and store-and-forward architectures.
  • Strong knowledge of device identity, X.509 certificates, PKI, secure provisioning, cryptography, key management, secure update mechanisms, and product vulnerability management.
  • Experience with the EU Cyber Resilience Act and an understanding of manufacturer obligations, cybersecurity requirements, vulnerability handling, support periods, technical documentation, reporting, and conformity-assessment readiness.
  • Experience applying secure development lifecycle practices, threat modeling, risk assessment, SBOM management, coordinated vulnerability disclosure, and product security incident response.
  • Strong knowledge of Azure networking, Entra ID, governance, observability, Infrastructure as Code, CI/CD, and DevSecOps practices.
  • Proven ability to work in Agile environments and translate architecture, security, and regulatory requirements into actionable backlog items and acceptance criteria.
  • Strong organizational, analytical, problem-solving, facilitation, communication, and executive presentation skills.
  • Ability to manage complex priorities independently while collaborating effectively across technical and business teams.
  • Preferred certifications include Microsoft Certified: Azure Solutions Architect Expert, Azure Security Engineer Associate, CISSP, CISM, CISA, or CRISC.
  • Experience with ISA/IEC 62443, ETSI EN 303 645, NISTIR 8259, ISO 27001, TISAX, CE-marking, conformity assessments, or other IoT and industrial cybersecurity frameworks is advantageous.
  • Experience with embedded Linux, real-time operating systems, firmware interfaces, hardware security modules, trusted platform modules, secure elements, SBOM tooling such as SPDX or CycloneDX, and software composition analysis is a plus.

  Benefits

  • Starting compensation of $155,000 per year, with the final offer based on experience, skills, qualifications, certifications, market factors, and geographic location.
  • Competitive compensation package with opportunities for professional growth.
  • Comprehensive health benefits.
  • 401(k) plan.
  • Fully remote work environment.
  • Potential occasional travel within the United States, including to client or manufacturing sites.
  • Opportunity to work on innovative IoT, cloud, cybersecurity, and industrial technology initiatives.
  • Exposure to complex enterprise and connected-product projects across manufacturing environments.
  • Collaborative, innovative, and team-oriented culture.
  • Opportunities to work with cross-functional technical, business, and executive stakeholders.
  • Professional development and opportunities to grow technical leadership expertise.