Role Overview:

Role is offshore with remote participation with atleast 5 hours overlap with US business hours for architecture workshops.

Cloud Architecture & M&A Integration (Primary Azure, Secondary AWS):

- Lead M&A discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity.

- Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations.

- Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments.

- Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments.

Infrastructure & Core Network Services:

- Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers.

- Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks.

- Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways.

Security & PKI (Public Key Infrastructure):

- Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities.

- Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways, and API Management services for robust encryption in transit.

- Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages.

Required Technical Skills and Qualifications:

Core Experience:

- Experience: 10 - 12 years in IT infrastructure, with at least 5+ years dedicated strictly to cloud architecture.

- M&A Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions.

Azure Expertise:

- Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints.

- Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization.

- Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates.

Network & Security Services:

- Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures.

- Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey).

Preferred & Advantageous Skills:

- Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a strong plus.

- Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional

Additional skills on AWS will be an advantage.