Azure IoT Solutions Architect
Azure IoT Solutions Architect
This is a fully remote position with potential occasional travel within the United States required.
PURPOSE
The Azure IoT Solutions Architect is a senior, hands-on technical leader responsible for designing, securing, and guiding delivery of enterprise and product-focused Internet of Things (IoT) solutions for manufacturing clients. The role leads end-to-end architecture across connected devices, edge gateways, industrial connectivity, Azure cloud services, data integration, and operational monitoring while ensuring security-by-design is embedded throughout the product lifecycle.
This role provides the technical leadership needed to support development teams building or modernizing products with digital elements. The successful candidate will translate the compliance related product-security requirements into actionable architecture decisions, engineering controls, evidence, roadmaps, epics, and user stories in partnership with legal, compliance, product, engineering, and operations stakeholders.
The position blends Azure IoT solution architecture, product cybersecurity, industrial and manufacturing integration, cloud security engineering, regulatory readiness, and Agile delivery leadership.
KEY RESPONSIBILITIES
IoT Solution Architecture & Manufacturing Integration
-
Design and lead secure end-to-end IoT architectures spanning connected products, embedded or edge systems, gateways, networks, Azure services, APIs, applications, data platforms, and operational support capabilities.
-
Define reference architectures and reusable patterns for device onboarding, telemetry ingestion, command and control, digital services, remote diagnostics, and lifecycle management.
-
Architect Azure IoT solutions using services such as Azure IoT Hub, Device Provisioning Service, IoT Edge, Event Hubs, Functions, Stream Analytics, storage, monitoring, and integration services as appropriate to the solution.
-
Guide integration with manufacturing and operational technology environments, including industrial gateways, plant networks, and protocols such as MQTT, AMQP, HTTPS, and OPC UA.
-
Evaluate scalability, resilience, latency, availability, data retention, regional deployment, disaster recovery, and cost requirements for global IoT solutions.
Product Cybersecurity Architecture & Engineering
-
Embed security-by-design, security-by-default, Zero Trust, and least-privilege principles across device, edge, network, cloud, application, and operational architectures.
-
Define device identity and trust models, including X.509 certificates, public key infrastructure, secure provisioning, key rotation, hardware-backed trust, secrets management, and certificate lifecycle processes.
-
Establish architecture requirements for secure boot, signed firmware and software, encrypted communications, secure update and rollback, tamper resistance, logging, monitoring, and incident response.
-
Lead threat modeling, attack-surface analysis, architecture risk assessments, and security design reviews for connected products and supporting remote data processing services.
-
Define and review Azure-native controls using Entra ID, managed identities, Azure Key Vault, Azure Policy, Defender for Cloud, Defender for IoT, Microsoft Sentinel, network security controls, and centralized monitoring.
Compliance Leadership
-
Serve as the technical lead for compliance readiness for products with digital elements, working with legal and compliance stakeholders to determine scope, product classification, support obligations, and the appropriate conformity assessment pathway.
-
Translate applicable compliance essential cybersecurity and vulnerability-handling requirements into technical controls, development standards, acceptance criteria, test evidence, and operational processes.
-
Establish or mature product cybersecurity risk assessments, technical documentation, secure configuration guidance, us