Job Title : Azure Cloud Solution Architect

Engagement : Full Time - Contract to Hire (C2H)

Notice Period : Immediate to 7 days

Locations : Mumbai, Pune, Bengaluru, Chennai, Hyderabad, Gurugram, Ahmedabad

Role Purpose :

We are seeking an experienced Azure Cloud Solution Architect to own and drive the target architecture and migration strategy across a scalable hub-and-spoke model leveraging Azure Virtual WAN (VWAN). The role is accountable for end-to-end cloud architecture covering networking, security, identity, compute, data, storage, and observability, supporting up to 41 programme instances.

The architect will act as a trusted advisor to business and technical stakeholders, ensuring that cloud designs are secure, compliant, repeatable, and aligned with enterprise and regulatory standards.

Key Responsibilities :

Landing Zone & Network Architecture :

- Define, validate, and standardize Azure Landing Zone integrations across environments.

- Design and implement Hub-and-Spoke / VWAN architectures, including Firewalls, NVAs, Private DNS, and routing strategies.

- Establish secure connectivity using VPN and ExpressRoute, ensuring strong network segmentation for multi-instance deployments.

Compute & Containerisation :

- Design and implement cloud-native compute solutions with a strong focus on container platforms (AKS, Azure Container Apps, App Service).

- Manage Azure Container Registry (ACR), ingress patterns using Application Gateway/WAF, and API exposure layers.

- Drive DevOps best practices, CI/CD pipelines, and automated deployments for containerized workloads.

Data Architecture & Migration :

- Architect PostgreSQL Flexible Server solutions including performance tuning, scalability, and HA/DR strategies.

- Define and execute migration approaches using Azure DMS, pg_dump/pg_restore, and related tooling.

- Ensure data integrity, resilience, and compliance across multiple programme migrations.

Security, Identity & Compliance :

- Design cloud security architectures aligned with NHS Digital and NCSC standards.

- Implement identity and access management using Microsoft Entra ID.

- Define key management and secrets strategy using Azure Key Vault.

- Establish and enforce security baselines, governance models, policies, and guardrails.

- Partner with InfoSec teams to ensure audit readiness and proactive risk mitigation.

Observability & Monitoring :

- Design and implement monitoring frameworks using Azure Monitor, Log Analytics, and

Application Insights.

- Define KPIs, dashboards, and alerting strategies to ensure operational visibility.

- Enable proactive incident detection, troubleshooting, and root cause analysis across all instances.

POC, Scalability & Enablement :

- Design and deliver Proof of Concepts (POCs) and reusable architecture patterns.

- Create and maintain architecture documentation, standards, and reusable IaC modules.

- Provide technical leadership, guidance, and mentoring to engineering and delivery teams.

Required Experience & Skills :

- 8 - 10 years of experience in Solution Architecture, with 5+ years focused on Azure cloud and container platforms.

- Proven experience delivering large-scale, multi-instance migrations (3050 instances).

- Strong hands-on expertise in Infrastructure as Code (Terraform and/or Bicep), including reusable modules and automation.

- Deep understanding of Azure networking, security baselines, governance, and cost optimization.

- Excellent stakeholder management and communication skills, capable of engaging both technical and non-technical audiences.

- Experience influencing architecture decisions at programme or enterprise scale.

Technology Stack :

- Networking : Azure Hub-and-Spoke, Virtual WAN, Private Endpoints, Firewalls/NVA, DNS

- Security & Identity : Microsoft Entra ID, Azure Key Vault, Policies, NHS Digital / NCSC compliance

- Compute : AKS, Azure Container Apps, App Service, Application Gateway/WAF, ACR

- Data & Storage : PostgreSQL Flexible Server, Azure Files, Azure Blob Storage (Premium)

- Observability : Azure Monitor, Log Analytics, Application Insights

- Integration : API Management, external vendor integrations (Yakara, MMG, PACS/Harmony)

- Automation : Terraform, Bicep, CI/CD pipelines

Why Join :

- Opportunity to lead large-scale Azure transformation programmes.

- High-impact architectural ownership across security, networking, and data platforms.

- Collaborative environment with strong visibility and influence at programme level.