Azure Cloud & Infrastructure Lead / Architect

Job Summary

We are looking for an experienced Azure Cloud Architect with strong hands-on engineering skills to design, implement, secure and operate enterprise-scale Azure cloud platforms. The ideal candidate will be responsible for cloud landing zones, governance, security, automation and networking.

The candidate should be capable of working across architecture, implementation, automation, cloud security and production operations while collaborating with infrastructure, security and application teams. Preferred candidates will have specific experience with Cloud and On-Premise infrastructure security.

Azure Platform Architecture

• Design enterprise Azure Landing Zone architecture.
• Design scalable, highly available and secure Azure infrastructure.
• Define cloud architecture standards and best practices.
• Build reusable cloud reference architectures.
• Design multi-subscription and multi-region Azure environments.
• Design Disaster Recovery (DR) and Business Continuity solutions.

Azure Infrastructure Engineering

Design, deploy and manage:

• Virtual Networks (VNet)
• VNet Peering
• ExpressRoute
• Site-to-Site VPN
• Azure Firewall
• Azure Bastion
• Network Security Groups
• Route Tables
• Load Balancers
• Application Gateway
• Private Endpoints
• Private DNS
• Azure DNS
• Storage Accounts
• Azure Files
• Managed Disks
• Virtual Machines
• Availability Zones
• Availability Sets
• Azure Backup
• Recovery Services Vault
• Azure Site Recovery
• Azure Monitor
• Log Analytics Workspace

Identity & Access Management

Implement and manage:

• Microsoft Entra ID (Azure AD)
• Conditional Access
• Privileged Identity Management (PIM)
• Role-Based Access Control (RBAC)
• Managed Identity
• Service Principals
• Identity Governance
• Multi-Factor Authentication (MFA)

Azure Security

Design and implement:

• Microsoft Defender for Cloud
• Azure Key Vault
• Azure Policy
• Azure Blueprints / Landing Zone Governance
• Azure Firewall Policies
• Network Segmentation

Platform Automation

Develop and maintain automation using:

• Azure CLI
• Azure PowerShell
• PowerShell
• Bicep

Azure Networking

Strong knowledge of:

• Hub & Spoke Architecture
• Virtual WAN
• DNS Architecture
• Azure Firewall
• Application Gateway WAF
• Load Balancer
• NAT Gateway
• CDN
• Traffic Manager
• Private Link
• Service Endpoints
• ExpressRoute
• VPN Gateway

Migration

Lead migration of:

• VMware
• Hyper-V
• Physical Servers
• Azure Migrate
• Azure Site Recovery
• Database Migration
• Storage Migration

Containers (Good to Have)

• Azure Kubernetes Service (AKS)
• Azure Container Registry (ACR)
• Helm
• Kubernetes Networking
• Ingress Controller
• Azure CNI
• Workload Identity
• Container Security

Documentation

Produce:

• High-Level Design (HLD)
• Low-Level Design (LLD)
• Standard Operating Procedures (SOP)
• Build Documents
• Architecture Diagrams
• Operational Runbooks

Required Technical Skills

• Azure Compute: Virtual Machines, Scale Sets, Availability Zones, Availability Sets
• Azure Storage: Blob Storage, File Storage, Managed Disks, Private Endpoints
• Networking: VNet, NSG, UDR, Azure Firewall, VPN, ExpressRoute, Bastion, Private Link, Azure DNS
• Security: Defender for Cloud, Key Vault, PIM, RBAC, Conditional Access, Microsoft Entra ID, Azure Policy
• Automation (nice to have): Terraform, Bicep, ARM, Azure DevOps, Ansible, PowerShell

Key Skills

• Azure Landing Zones
• Entra ID
• Azure Networking
• Defender for Cloud