Role Overview

We are creating a new role to lead the conversion of our current Azure-based platform—that includes but not limited to App Services, Function Apps, SQL Server, Blob Storage, Key Vault, Power BI, and Azure B2C—into a fully on‑premises solution delivered through a customer‑run installer. This role defines the architecture, builds the packaging and installation experience, and ensures the system can operate securely and reliably in customer environments.

Key Responsibilities

- Architecture & Migration

- Design an on‑prem architecture replacing Azure components with local or containerized equivalents.

- Define data, identity, and secret‑management strategies.

- Develop upgrade, rollback, and migration paths.

Installer & Delivery

- Build a guided installer with pre‑flight checks and rollback support using an industry standard installer (eg. InstallShield)

- Implement MSI/WiX, DEB/RPM, or container-based packaging.

- Support air‑gapped and offline installations.

Security, Reliability & Supportability

- Establish secure defaults for certificates, secrets, RBAC, and configuration.

- Implement health checks, diagnostics, logging, and backup/restore.

- Provide runbooks for customer IT teams.

Required Qualifications

- 5+ years in software/platform engineering with cloud-to-on-prem migration experience.

- Strong knowledge of .NET/Node, containers, Windows/Linux, networking, and TLS.

- Experience with Azure DevOps Pipelines for CI/CD.

- Experience with installer technologies (MSI/WiX, InstallShield, DEB/RPM).

- Familiarity with OIDC, OAuth2, SAML and/or AD/LDAP.

- Strong understanding of secrets management and certificate handling.

Preferred Qualifications

- Experience replacing Azure PaaS services.

- Experience with InstallShield a plus.

- Experience with on‑prem monitoring stacks.

- Experience with air‑gapped environments.