Skill

role-architect:azure-architect

Azure architecture expertise including Azure Well-Architected Framework, subscription and management group strategy, virtual network and hybrid networking, identity architecture with Entra ID, data platform design, Kubernetes and serverless patterns, security architecture, and cost optimization strategies. Use proactively when designing systems on Azure, evaluating Azure services, planning Azure landing zones, or architecting for Azure-specific capabilities.

Install

npx claudepluginhub rnavarych/alpha-engineer --plugin role-architect

Tool Access

This skill is limited to using the following tools:

ReadGrepGlobBash

Preview

- Designing or reviewing an Azure landing zone, subscription, or management group hierarchy

Supporting Assets

references/azure-data-security-cost.mdreferences/azure-platform-and-networking.md

SKILL.md

Similar Skills

ui-ux-pro-max

Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.

ui-ux-pro-max

57.6k

context7-mcp

Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.

context7-plugin

51.8k

market-sizing-analysis

2 files

Calculates TAM/SAM/SOM using top-down, bottom-up, and value theory methodologies for market sizing, revenue estimation, and startup validation.

startup-business-analyst

32.9k

Stats

Parent Repo Stars9

Parent Repo Forks0

Last CommitMar 3, 2026

Actions

View Source View Plugin View on GitHub View README

role-architect:azure-architect

When to use

Designing or reviewing an Azure landing zone, subscription, or management group hierarchy

Selecting between AKS, Container Apps, and Azure Functions for a workload

Architecting hub-and-spoke networking, ExpressRoute, or Private Link topology

Choosing between Cosmos DB, Azure SQL, Synapse, and Event Hubs for a data platform

Configuring Defender for Cloud, Sentinel, or Azure Policy for security posture

Optimizing Azure costs with reservations, Savings Plans, Spot VMs, or Hybrid Benefit

Core principles

Landing zone first — governance and network topology before any workload

Managed identity everywhere — no credentials in code, ever

Hub-and-spoke by default — centralized firewall, spokes for workload isolation

Policy as guardrails — enforce standards at the management group level, not per resource

Cost visibility before commitment — analyze usage patterns before buying reservations

Reference Files

references/azure-platform-and-networking.md — Well-Architected Framework five pillars, subscription strategy, Azure Policy, hub-and-spoke topology, Front Door vs Application Gateway, ExpressRoute vs VPN, Entra ID identity architecture, PIM, workload identity, RBAC design, AKS, Container Apps, and Azure Functions patterns

references/azure-data-security-cost.md — Cosmos DB partition design and consistency levels, Azure SQL and Synapse tiers, Event Hubs and Service Bus patterns, Data Lake Gen2 and Microsoft Fabric, Defender for Cloud CSPM/CWP, Microsoft Sentinel, NSGs, Azure Key Vault, Purview; Reserved Instances, Savings Plans, Spot VMs, Hybrid Benefit, and FinOps practices

Azure Architect

When to use

Designing or reviewing an Azure landing zone, subscription, or management group hierarchy
Selecting between AKS, Container Apps, and Azure Functions for a workload
Architecting hub-and-spoke networking, ExpressRoute, or Private Link topology
Choosing between Cosmos DB, Azure SQL, Synapse, and Event Hubs for a data platform
Configuring Defender for Cloud, Sentinel, or Azure Policy for security posture
Optimizing Azure costs with reservations, Savings Plans, Spot VMs, or Hybrid Benefit

Core principles

Landing zone first — governance and network topology before any workload
Managed identity everywhere — no credentials in code, ever
Hub-and-spoke by default — centralized firewall, spokes for workload isolation
Policy as guardrails — enforce standards at the management group level, not per resource
Cost visibility before commitment — analyze usage patterns before buying reservations

Reference Files

references/azure-platform-and-networking.md — Well-Architected Framework five pillars, subscription strategy, Azure Policy, hub-and-spoke topology, Front Door vs Application Gateway, ExpressRoute vs VPN, Entra ID identity architecture, PIM, workload identity, RBAC design, AKS, Container Apps, and Azure Functions patterns
references/azure-data-security-cost.md — Cosmos DB partition design and consistency levels, Azure SQL and Synapse tiers, Event Hubs and Service Bus patterns, Data Lake Gen2 and Microsoft Fabric, Defender for Cloud CSPM/CWP, Microsoft Sentinel, NSGs, Azure Key Vault, Purview; Reserved Instances, Savings Plans, Spot VMs, Hybrid Benefit, and FinOps practices