Careers

About CRA

Colorado River Analytics is Microsoft First. Multi-Cloud Capable. People First. Agent Ready. We are a Frontier-aligned services firm: we deliver clarity and proven frameworks across Microsoft and multi-cloud environments — directly, co-branded with partners, or white-labeled — under CRA governance.

People First means the engineer who implements the landing zone is as important as the architecture. Agent Ready means we build governed, repeatable platforms that people and agents can operate with confidence.

Delivery is powered by methodologies licensed from Optimus Talentum LLC, including Path Forward™, Trailhead™, Cairn™, and Ironwood™. On Azure we apply the Cloud Adoption Framework, Well-Architected Framework, and Landing Zones.

The role

This is a Remote seat on a CRA delivery pod. An architect/lead owns the backlog and design freeze (Path Forward™). You own implementation through Trailhead™ and leave Cairn™-ready configuration so the next wave — and the next person or agent on the team — can rerun it.

You will build and run Azure landing zones: hub-and-spoke connectivity, hybrid circuits, and workload platforms. Most of the work is Bicep (or equivalent IaC), Azure DevOps, parameter files, and pipeline runs — including cutovers when a circuit, gateway, or platform service is ready.

What you will do

• Implement CAF-style landing zones: connectivity hub, shared services, and workload subscriptions
• Build and maintain hub networking: VNets, subnets, peering, gateway transit, Bastion, DNS Private Resolver, and Private DNS
• Stand up and operate hybrid connectivity: ExpressRoute (including active-active / maximum resiliency), private peering, BGP, and customer-provided circuit values
• Extend hubs for inspection and edge: NVA/Palo Alto HA subnets, partner SD-WAN subnets, and Route Server / BGP peers when the design calls for them
• Deploy and operate Azure VMware Solution (AVS) and related hybrid platform services when the client program requires them
• Implement migration underlay (for example HCX) when a client is stretching or moving from on-premises / colocation
• Add supporting platform stacks such as shared storage, Cost Management budgets, and DNS resolution for on-premises management names
• Own Azure DevOps pipelines for infrastructure and keep parameter files and engineer guides current
• Work in English with U.S. clients and CRA leads; additional languages are a plus

Must have

• 5+ years hands-on Microsoft Azure infrastructure (not only ticket/admin work)
• Delivered at least one hub-and-spoke or landing-zone program with IaC
• Strong hybrid networking: ExpressRoute and/or VPN, peering, BGP basics, and reading effective routes
• Infrastructure as Code in Bicep and/or Terraform
• Azure DevOps (or equivalent) CI/CD for infrastructure
• Professional English, written and spoken
• Ability to work Remote and overlap a standard U.S. business day
• Current Microsoft certifications: Azure Administrator Associate (AZ-104), Azure Network Engineer Associate (AZ-700), and Azure Solutions Architect Expert (AZ-305)

Strongly preferred

• Azure Fundamentals (AZ-900)
• AWS Certified Cloud Practitioner and/or SysOps Administrator – Associate
• Azure VMware Solution (AVS) and HCX
• Palo Alto or similar NVA in an Azure hub
• Bilingual Spanish/English
• Prior work in a Microsoft partner, MSP, or consulting delivery model

How to apply

Email your résumé, a Microsoft Learn transcript (or equivalent certification verification), and a short note on a landing-zone or hybrid-networking program you implemented (what you built, which IaC/tooling, and what you personally ran).