Azure cloud architect with DNS/DHCP

Job Title: Azure cloud architect with DNS/DHCP

Experience: 12+ Years

Location: Chennai- WFO

Cloud Architecture & M&A Integration (Primary Azure, Secondary AWS)

• Lead M&A discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity.
• Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations.
• Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments.
• Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments.

• Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers.
• Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks.
• Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways.

• Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities.
• Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways, and API Management services for robust encryption in transit.
• Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages.

• Experience: 10-12 years in IT infrastructure, with at least 5+ years dedicated strictly to cloud architecture.
• M&A Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions.

• Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints.
• Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization.
• Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates.

• Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures.
• Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey).

• Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a strong plus.
• Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional