Job Description:

We are looking for experienced Azure Infrastructure / Cloud Architects with strong expertise in designing and managing enterprise-scale Azure environments. The ideal candidate should have hands-on experience across Azure infrastructure, Kubernetes, Infrastructure as Code, DevOps, security, and SRE/operations.

Total Experience: 8-13 years

Key Responsibilities:

- Design and manage enterprise-scale Azure Infrastructure and Landing Zones.

- Work with Management Groups, Subscriptions, Resource Groups, Azure Policy, and Azure RBAC.

- Implement and manage Microsoft Entra ID (Azure AD), Private Endpoints, Virtual Networks, VPN, and ExpressRoute.

- Manage Azure Key Vault, Azure Monitor, and enterprise cloud infrastructure.

- Design and implement Infrastructure as Code (IaC) using Terraform and GitOps practices.

- Deploy and manage AKS, Kubernetes, Docker, Helm, and Azure Container Registry.

- Work with Service Mesh technologies, with Istio preferred.

- Build and manage CI/CD pipelines using Azure DevOps and GitHub Actions.

- Work with GitHub Enterprise and artifact repositories such as JFrog.

- Implement cloud security and compliance using Zero Trust Architecture, IAM, RBAC, Managed Identities, NSGs, Private Link, and Defender for Cloud.

- Implement monitoring and observability using Azure Monitor, Log Analytics, Application Insights, OpenTelemetry, Prometheus, and Grafana.

- Collaborate with DevOps, security, application, and infrastructure teams to build secure, scalable, highly available Azure solutions.

- Drive automation, operational excellence, and SRE best practices across cloud environments.

Required Technical Skills:

- Azure Landing Zones, Management Groups, Subscriptions, Resource Groups

- Azure Policy, Azure RBAC, Microsoft Entra ID (Azure AD)

- Private Endpoints, Private Link, Virtual Networks, VPN, ExpressRoute

- Azure Key Vault, Azure Monitor

- Terraform (Preferred), Infrastructure as Code (IaC), GitOps

- AKS, Kubernetes, Docker, Helm, Azure Container Registry

- Service Mesh - Istio (Preferred)

- Azure DevOps, GitHub Enterprise, GitHub Actions

- CI/CD Pipelines, JFrog / Artifact Repositories

- Zero Trust Architecture, IAM, RBAC, Managed Identities

- Network Security Groups, Defender for Cloud

- Log Analytics, Application Insights, OpenTelemetry

- Prometheus, Grafana

- SRE, Cloud Security, Monitoring & Observability