Notice Period : Immediate to 1 Month

Job Description :

We are seeking a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. The candidate will be responsible for designing, building, securing, and operating production-grade Azure environments aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework principles. The role requires hands-on mastery of Infrastructure as Code (Terraform and/or Bicep), automation, governance, identity, security controls, and scalable network design. The individual will also serve as a technical advisor to stakeholders, lead cloud transformation initiatives, and mentor engineering teams. Strong communication, stakeholder management, documentation, and presentation skills are mandatory.

Enterprise Architecture & Landing Zone :

- Design and implement enterprise-grade Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF), Azure Enterprise-Scale Architecture, and Zero Trust Security Model.

- Define and implement Management Groups hierarchy, Subscription strategy, Resource organization, Naming conventions, RBAC, and policy-driven governance.

- Establish multi-subscription, multi-environment architecture.

Azure Networking :

- Architect secure and scalable network topologies including Hub-and-Spoke / Virtual WAN, ExpressRoute, Site-to-Site VPN, Private Endpoints, Azure Firewall, and Load Balancers.

- Design IP addressing strategy and network security controls.

Azure Security & Governance :

- Implement enterprise security posture using Microsoft Defender for Cloud, Azure Policy, Conditional Access, and Privileged Identity Management (PIM).

- Design secure identity architecture using Entra ID (Azure AD), RBAC, and Managed Identities.

- Ensure compliance with ISO, SOC2, CIS, and NIST standards.

Infrastructure as Code & Automation :

- Develop reusable, modular Infrastructure-as-Code using Terraform and/or Bicep.

- Create standardized deployment pipelines using Azure DevOps / GitHub Actions.

- Implement CI/CD practices for infrastructure delivery.

Operations, Reliability & Cost Management :

- Design for high availability, disaster recovery, and scalability.

- Implement observability using Azure Monitor, Log Analytics, and Application Insights.

- Enable cost governance, budgeting, and rightsizing.

Stakeholder Engagement & Leadership :

- Translate business requirements into technical architecture.

- Produce high-quality architecture documentation and runbooks.

- Lead technical discussions with customers and auditors.

- Mentor junior engineers and promote engineering excellence.

Required Skills :

- Microsoft Azure platform (IaaS, PaaS, Networking, Security).

- Azure Landing Zone design and deployment.

- Expert-level proficiency in Terraform and/or Bicep.

- Git-based workflows and CI/CD pipelines.

- Deep knowledge of TCP/IP, DNS, routing, and hybrid connectivity.