It is very possible you run azkaban instance anywhere there is an ACL to the production cluster you want to run jobs on.
In Azkaban2, each job type has its own classloader. You can config a specific type with configurations of a specific cluster. For example, you can give hadoop conf directory in the class loader classpath of say pig, then it should be talking to the namenode and job trackers specified in the conf files.
You need ACL from azkaban machine to your cluster, of course.