Azure Cloud Architect
Tezo · Hyderabad · onsite · Posted 29d ago
Undisclosed12–15 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job role : Azure Cloud Architect Experience : 12- 15 years Location : Hyderabad Key Responsibilities
- Own the end-to-end Azure solution architecture for migration and modernization of enterprise applications from on-premises environments to Azure.
- Design Azure architecture for multi-tenant SaaS/application platforms, including appropriate tenant isolation, shared services, identity, data, messaging, and control-plane patterns.
- Define Azure landing zone, subscription, resource group, networking, security, governance, and environment strategy.
- Design hybrid connectivity between on-premises and Azure using technologies such as VPN, ExpressRoute, private endpoints, VNets, routing, NSGs and Azure Firewall.
- Architect secure ingress/egress using Azure Front Door, Application Gateway/WAF, API Management and Azure Firewall, selecting the appropriate service based on traffic patterns and security requirements.
- Design API architecture using Azure API Management, including OAuth2/OIDC, mTLS, certificates, throttling, policies, versioning and API security.
- Evaluate and select appropriate compute platforms including Azure Kubernetes Service (AKS), Azure Container Apps and Azure App Service, considering workload characteristics, operational complexity, scalability and cost.
- Design identity architecture using Microsoft Entra ID, Managed Identities, workload identities, RBAC and service-to-service authentication.
- Architect event-driven and asynchronous integration using Azure Event Hubs, Service Bus, Functions and related messaging patterns.
- Define telemetry and high-volume event ingestion architecture using Event Hubs and Azure Data Explorer (ADX), including partitioning, retention, throughput and tenant identification strategies.
- Design application and operational data solutions covering Azure databases, storage, hot/warm/cold data, archival and long-term retention.
- Define patterns for Service Bus topics/queues, dead-letter handling, retries, idempotency and failure recovery.
- Architect high availability, disaster recovery, backup and multi-region deployment strategies, including North America regional pairing requirements.
- Define observability and monitoring using Azure Monitor, Application Insights, Log Analytics and platform telemetry.
- Establish security architecture aligned with Zero Trust, least privilege, encryption, secrets management, network segmentation and Azure security best practices.
- Drive infrastructure automation using Terraform/Bicep and CI/CD pipelines.
- Define architecture standards, reusable patterns, Architecture Decision Records (ADRs) and technical guardrails.
- Conduct architecture reviews, threat modelling, performance reviews, capacity planning and cost optimization.
- Work closely with application engineering, DevOps, security, data and product teams to translate architecture into an executable migration roadmap.
- Provide hands-on technical guidance during implementation, troubleshooting and production readiness.
- Strong hands-on architecture experience with:
- Azure Platform: Azure Landing Zones, subscriptions, VNets, Private Link/Private Endpoints, Azure Firewall, Front Door, Application Gateway/WAF, VPN Gateway and ExpressRoute.
- Application & Compute: AKS, Azure Container Apps, App Service, Functions, containerized workloads, microservices and distributed application architecture.
- API & Integration: Azure API Management, REST APIs, OAuth/OIDC, mTLS, Event Hubs, Service Bus, event-driven architecture and asynchronous messaging.
- Identity & Security: Microsoft Entra ID, Managed Identity, Workload Identity, RBAC, Key Vault, certificates/secrets management and Zero Trust principles.
- Data & Telemetry: Azure Data Explorer (ADX), Azure Storage, relational/NoSQL databases, high-volume telemetry ingestion, data retention and archival strategies.
- DevOps & IaC: Terraform and/or Bicep, Azure DevOps/GitHub Actions, CI/CD, automated environment provisioning and policy-as-code.
- Operations: Azure Monitor, Application Insights, Log Analytics, alerting, SRE/operational readiness, HA/DR, backup and capacity planning.
The ideal candidate should be able to confidently design and challenge architectures on Azure:
On-prem Azure connectivity Front Door/WAF API Management APIs/microservices Event Hubs/Service Bus processing services operational and telemetry data stores.
They should also be comfortable making architectural trade-offs such as:
AKS vs Container Apps vs App Service, Front Door vs Application Gateway, Event Hubs vs Service Bus, public vs private connectivity, shared vs tenant-specific infrastructure, and centralized vs distributed data/storage patterns.
Required Experience - 10+ years in software/cloud/infrastructure engineering with significant architecture responsibility.
- 5+ years of hands-on Microsoft Azure architecture experience.
- Proven experience designing enterprise-scale Azure platforms.
- Experience with multi-tenant SaaS or distributed application architectures.
- Experience migrating workloads from OCI, AWS, data centers or on-premises environments to Azure.
- Strong understanding of cloud networking, security, identity and integration architecture.
- Experience with high-volume event/telemetry platforms is highly desirable.
- Ability to produce HLDs, LLDs, architecture diagrams, ADRs, deployment patterns and migration roadmaps.
- Strong stakeholder communication skills with the ability to explain architecture decisions to both engineering teams and senior stakeholders.
Microsoft Azure architecture certifications such as AZ-305 / Azure Solutions Architect Expert are preferred. Experience with Terraform, Kubernetes/AKS, Azure Well-Architected Framework, Cloud Adoption Framework, FinOps and enterprise-scale Azure governance would be advantageous.
Required Skills
Landing zone cloud networking Azure kubernetes services Azure cloud subnet Vnet Azure cloud infrastructure
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationApi ManagementApplication Architecturesapisapi securityamazon web servicesAksapplication architectureApplication GatewayApplication EngineeringApplication InsightsAnalyticsAsynchronousAPI architectureArchitectureMicrosoft Azure
About Tezo
Tezo
IT Services & Consulting
300
employees
2012
14 years old
Seattle, Washington
India
₹11.6L PA avg
Avg at Tezo
About
Tezo provides advanced IT services aimed at creating impactful digital experiences, with a focus on solving complex client challenges.
Industries
IT Services & Consulting
Employee ratings
10 reviews
3.5/ 5
Culture
4.4
Career growth
3.9
Work-life
4.8
Employees rate it well for
Work-Life Balance38Skill Development38
Find them on