Architect I-W2

Requisition Number: 104601 \n\n * Skills- Azure Platform Engineer , Palo Alto Next Generation firewall design \u0026 implement\n\n\n\n\n * Overview and Deliverables \n\n\n\n\nService Description\n\nThe following services reflect the effort associated with Azure landing zone remediation, environment hardening, and the subsequent migration of ~450 virtual machines (\u201cVMs\u201d) to Azure for the Client. These services are required to align with the Client\u2019s current migration strategy, Microsoft Cloud Accelerate Factory expectations, and Client\u2019s target data center evacuation objectives.\n\nScope and Approach\n\nInsight will perform the following Services:\n\nLanding Zone Remediation \u0026 Environment Hardening (Milestone 4)\n\nInsight will provide engineering, architectural guidance, and implementation services necessary to bring the Azure landing zone to full production readiness in support of the upcoming migration waves. Work includes:\n\nLanding Zone Remediation\n\nValidate and remediate foundational landing zone components based on Microsoft Well-Architected Framework guidance for Azure\n\nAlign resource groups, subscription structure, policy assignments, and RBAC with Client\u2019s Azure governance model\n\nUpdate network topology to support deployments in the following Azure Regions West US 2, West Central US, West US, and East US, secure ingress/egress, and forced-tunneling requirements\n\nDeploy or remediate Azure Firewall, Firewall Manager, and Network Manager configurations\n\nImplement Defender for Cloud security controls, alerts, and policy baselines across all subscriptions\n\nValidate hybrid connectivity and failover patterns required for migration and DR scenarios\n\nEnvironment Hardening\n\nConfigure Azure Backup for VMs, Azure Files, and other Azure resources as required\n\nIntegrate Azure Site Recovery (ASR) where applicable to support disaster recovery strategy\n\nEnsure monitoring and observability baselines are in place (Azure Monitor, Log Analytics, Metrics, Alerts)\n\nEstablish runbooks and operational guidance for post-migration support and incident response\n\nImplement key management and security configuration updates based on Insight, Microsoft, and industry best practices\n\nThis work will occur concurrently with migration execution, completing shortly after final migration cutover to ensure stabilization and production-ready posture.\n\nMigration Execution \u0026 Oversight (Milestone 3)\n\nInsight will support Client through a multi-wave migration of approximately 450 VMs, leveraging Microsoft\u2019s Cloud Accelerate Factory for execution while providing technical governance, readiness validation, and issue remediation. Work includes:\n\nMigration Readiness \u0026 Coordination\n\nValidate Azure Migrate discovery data and reconcile VM inventory with Client\u2019s application owners\n\nPrepare migration groups, dependency maps, and cutover plans for each sprint\n\nCoordinate with Microsoft Factory engineers to ensure proper sequencing, replication readiness, and pre-cutover validation\n\nSupport Factory intake requirements, eligibility criteria, and technical prerequisites\n\nWave Execution Oversight\n\nProvide migration leadership and engineering support across eight 2-week sprints (approx. 60 servers per sprint)\n\nRemediate replication issues, agent failures, and configuration blockers not handled by Factory\n\nTroubleshoot network, identity, and application-level issues uncovered during migration\n\nValidate migration success criteria: connectivity, authentication, performance baselines, and workload health\n\nDocument each sprint with status updates, risk logs, and lessons learned\n\nPost-Migration Stabilization\n\nAddress post-cutover issues related to networking, security, access, monitoring, or application configuration\n\nConfirm handoff readiness to Client operations and/or Insight Managed Services\n\nUpdate diagrams, inventories, and configuration documentation to reflect migrated state\n\nInsight will serve as lead integrator between Client leadership, application teams, infrastructure teams, and the Microsoft Factory, ensuring alignment, risk mitigation, and successful evacuation of both data centers.\n\nSummary of Changes accommodated since Phase 1 under a previous (separate) SOW:\n\nAdds a structured Landing Zone Remediation in Azure \u0026 Hardening workstream (Milestone 4)\n\nAdds Migration Execution Oversight for ~450 VMs leveraging Microsoft Factory (Milestone 3)\n\nAdds Citrix platform assessment, design validation, and implementation integration as a parallel workstream to support end-user computing during the Azure migration\n\nAligns services with the revised 2026 migration schedule and Factory-based delivery model \n\nUpdates the total level of effort, resource model, and timeline to reflect required technical activities\n\nThe position described above provides a summary of some the job duties required and what it would be like to work at Insight. For a comprehensive list of physical demands and work environment for this position, click here.\n\nInsight is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.\n\nPosting Notes: Houston || Texas (US-TX) || United States (US) || IT Infrastructure \u0026 Support || None || US - Houston, TX ||\n