Consultant - Azure Cloud
YASH Technologies · Bengaluru · onsite · Posted 44d ago
Undisclosed6–9 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
We are looking forward to hire Azure Cloud Professionals in the following areas :
Experience required: 5+ years.
Job Summary
We are looking for a Senior solution architecht, Azure Cloud to own and drive enterprise Azure infrastructure with a strong focus on architecture, resilience, security and compliance and alignment with Microsoft Well-Architected Framework and industry best practices. The ideal candidate brings 6-9 years of deep relavant Azure experience and has a track record of building well-governed, secure, and optimized cloud environments. This role requires someone who doesn t just build infrastructure but continuously evaluates, hardens, and improves it.
Essential Duties and Responsibilities
- Architecture Strategy
- Well-Architected Framework + Cloud Adoption Framework (CAF)
- Enterprise-Scale Landing Zones (MG hierarchy, subscription vending)
- Multi-region BCDR design (RTO/RPO, paired regions)
- Architecture Decision Records (ADRs) and design documentation
- Identity (Entra ID)
- Conditional Access (Zero Trust, risk-based)
- PIM, RBAC at scale, access reviews
- Hybrid identity (Entra Connect), B2B/B2C
- Managed identities + Workload Identity for AKS
- Networking
- Hub-spoke / Virtual WAN topologies
- Front Door, App Gateway, WAF, Azure Firewall
- ExpressRoute, VPN, Private Endpoints
- DDoS, Network Watcher, NSG flow logs
- DNS
- Azure Private DNS zones + Private Resolver
- Conditional forwarding, zone links (registration vs resolution)
- Split-horizon / hybrid name resolution
- Certificates Secrets
- Key Vault - lifecycle, auto-rotation
- Internal CA integration, Managed HSM
- Secret rotation patterns for apps
- Compute Containers
- AKS - networking modes, Workload Identity, ingress, upgrades
- VMs, VMSS, Bastion, Update Management
- App Service (slots, scaling), Azure Functions
- Container Apps, ACR (geo-replication)
- Integration PaaS
- API Management (policies, products, versioning)
- Service Bus, Event Grid, Event Hubs
- Logic Apps (Standard / Consumption)
- Data
- Azure SQL / SQL MI, Cosmos DB
- PostgreSQL / MySQL Flexible Server
- Storage (Blob lifecycle, Files, NetApp), replication strategies
- AI Analytics
- Azure OpenAI / AI Foundry with private endpoints
- RAG patterns, content safety
- AI Search; Synapse / Fabric if in scope
- Security Compliance
- Defender for Cloud (CSPM/CWPP)
- Microsoft Sentinel (SIEM/SOAR)
- Azure Policy + initiatives, CIS/NIST compliance
- Observability
- Azure Monitor, Log Analytics, App Insights
- KQL for analysis, action groups, auto-remediation
- Azure Resource Graph for inventory
- Cost FinOps
- Rightsizing, RI / Savings Plans
- Tagging, budgets, anomaly alerts
- FinOps practice (Inform Optimize Operate)
- BCDR
- Azure Site Recovery, immutable backups
- Geo-replication for SQL / Cosmos / Storage
- Regional failover runbooks and DR drills
- Hybrid Migration
- Azure Arc (servers, K8s, data)
- Azure Migrate, DMS
- 6 Rs - rehost / refactor / replatform / rearchitect
- IaC DevOps
- Terraform + Bicep
- YAML pipelines (Azure DevOps / GitHub Actions)
- Policy-as-Code, security scanning (Checkov / tfsec)
- Automation
- PowerShell + Python (Azure SDK)
- Azure Automation (runbooks, hybrid worker)
- Event-driven via Functions / Logic Apps
Additional Responsibilities
Education
- Bachelors Degree Computer Science required or
- Bachelors Degree Information System required
Work Experience
- Minimum 5+ years of relevant Azure cloud administration experience.
Preferred Knowledge, Skills and Abilities
- Strong working knowledge of Cloud Adoption Framework and Well-Architected Framework, applied to design reviews and remediation
- Hands-on proficiency with Python, PowerShell, and Azure CLI for administration, identity management, and automation
- Deep understanding of Entra ID - authentication flows, token lifecycle, Conditional Access evaluation, directory
synchronization - Solid grasp of PKI - certificate chains, TLS handshake, formats (PFX, PEM, CER), and lifecycle management
- Experience designing DNS resolution strategies across hybrid environments (private zones, conditional forwarding,
split-horizon) - Working knowledge of hybrid Azure networking - hub-spoke topologies, ExpressRoute / VPN, Private Endpoints, NSG and routing
fundamentals - Proficiency in Infrastructure-as-Code - Terraform and/or Bicep, including module design and policy-as-code
- Baseline understanding of container platforms (AKS) - networking modes, ingress, workload identity
- Ability to translate Advisor, Defender for Cloud, and Cost Management insights into actionable optimization, security, and
FinOps plans - Strong communication skills - articulating technical trade-offs and driving consensus across engineering and leadership
audiences
License and Certifications
- Desirable AZ-305 - Azure Solutions Architect Expert or other relvant
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationApi ManagementAzure DevopsAgileAksAzure InfrastructureAzure OpenAIAzure NetworkingAzure FirewallAnalyticsazure cliAzure AutomationAzure PolicyArchitectureAdministrationMicrosoft AzureAzure FunctionsArtificial Intelligence
About YASH Technologies
YASH Technologies
IT Services & Consulting
4.9k+
employees
1996
30 years old
Indore, Madhya Pradesh
India
About
YASH Technologies is a leading systems integrator and outsourcing partner that focuses on empowering its customers to drive enterprise-wide business transformation at scale.
Industries
IT Services & Consulting
Employee ratings
2,024 reviews
3.6/ 5
Culture
3.6
Career growth
3.1
Work-life
3.7
Employees rate it well for
Work Life Balance263Work Culture219Senior Management171Salary156Job Security147
Find them on