Infrastructure Architect (Cloud & Platform)

Role & responsibilities

Design, implement, and secure scalable Azure cloud infrastructure with a strong focus on AKS (Azure Kubernetes Service), cloud security, automation, governance, and operational excellence.

Key Responsibilities

• Design and manage Azure Landing Zones, Hub-Spoke networking, ExpressRoute/VPN, and Private Endpoints.
• Own and architect AKS platforms, including cluster design, Azure CNI networking, ingress, autoscaling, ACR, and disaster recovery.
• Implement Zero Trust security, RBAC, PIM, Entra ID, Azure Firewall, and network security controls.
• Secure AKS environments using PSA, Network Policies, Workload Identity, Container Scanning, and Defender for Containers.
• Develop Infrastructure as Code using Terraform/Bicep and automate deployments through Azure DevOps/GitHub CI/CD.
• Implement GitOps (Flux/ArgoCD), monitoring, logging, and policy-as-code.
• Drive cloud governance, compliance, BCDR, FinOps, and operational excellence.

Mandatory Skills

• Microsoft Azure Architecture
• Azure Landing Zone & Hub-Spoke Design
• AKS (Azure Kubernetes Service)
• Azure CNI / Kubernetes Networking
• Terraform or Bicep
• Azure DevOps / GitHub CI/CD
• Entra ID, RBAC, PIM
• Azure Firewall, WAF, NSG
• Defender for Cloud & Microsoft Sentinel
• Azure Monitor & Log Analytics
• GitOps (Flux/ArgoCD)

Mandatory AKS Security Skills

• Pod Security Admission (PSA)
• Network Policies
• Workload Identity
• Secrets Management