Azure Cloud Architect

Experience 8-12 Years Location: Preferred in Noida but open to any location if he can travel based on business need to Singapore Role Summary We are looking for a hands-on Azure Cloud Architect who can design, implement, and support enterprise Azure cloud environments. The ideal candidate should have practical experience with Azure Landing Zones, cloud networking, governance, and Infrastructure as Code. This role will work closely with global teams to deliver cloud transformation initiatives for enterprise customers. This is a hands-on role requiring strong engineering skills, Infrastructure-as-Code (IaC), and the ability to work across teams (network/security/app/devops). Key Responsibilities Azure Landing Zone (Platform) Implement and enhance the Azure Landing Zone aligned with Microsoft CAF/ALZ principles: Management Groups hierarchy and subscription strategy Standardized resource organization, naming, tagging, and guardrails RBAC model, role assignments, PIM (if applicable), and access governance Azure Policy / initiatives for compliance and enforcement Establish repeatable onboarding patterns for new subscriptions and workloads. 2) Azure Networking & Hybrid Connectivity (Core) Design and operate enterprise Azure networking (commonly hub-spoke or similar): VNets, subnets, UDRs, NSGs, route tables, private DNS Connectivity via IPSec VPN / ExpressRoute (where applicable) Integration with enterprise routing / firewall controls and static routes (as required) Implement/operate secure inbound/outbound patterns (e.g., Azure Firewall / NVA, NAT, proxy, private endpointsbased on standards). 3) Security, Governance & Compliance Implement platform security controls: RBAC best practices, least privilege, access reviews Policy-based governance for baseline security & compliance Secure configuration standards for networking and platform resources Support security monitoring and remediation in collaboration with SecOps. 4) Observability & Operations Enablement Implement monitoring and logging baselines: Azure Monitor, Log Analytics, alerting, dashboards Standard diagnostics settings for platform services and subscriptions Create operational runbooks and support readiness: Incident troubleshooting guides, escalation paths, platform documentation Provide L2/L3 engineering support for the platform (as needed), including RCA and problem management. 5) Infrastructure Automation / DevOps (IaC First) Build and maintain IaC modules and pipelines for repeatable deployment: Terraform and/or Bicep/ARM CI/CD using Azure DevOps (or GitHub Actions if applicable) Develop reusable templates/modules for: Subscription vending/onboarding Network baseline deployment Policy/RBAC/diagnostics baselines 6) Stakeholder & Technical Leadership Act as a technical lead for the platform workstream: Collaborate with network, security, and application teams Guide application teams on onboarding, patterns, and guardrails Contribute to platform standards, reference architectures, and decision logs Required Skills 812 years of IT experience with minimum 5 years in Azure Cloud . Hands-on experience with Microsoft Azure Platform Engineering Azure Landing Zone (ALZ) Azure Management Groups & Subscription Management Azure RBAC & Azure Policy Azure Networking (VNet, NSG, UDR, VPN/ExpressRoute) Terraform (Primary IaC Skill) Bicep or ARM Templates Azure DevOps Pipelines Azure Monitor & Log Analytics Cloud Security & Governance CI/CD & Git L2/L3 Azure Platform Troubleshooting Preferred Skills Experience with Azure Landing Zone (ALZ) reference implementation / CAF Private connectivity patterns: Private Endpoints, private DNS zones, egress control patterns Security tooling exposure (depending on your environment): Microsoft Defender for Cloud, Sentinel Experience with Azure DevOps administration (agents, permissions, service connections) Basic knowledge of AWS (only if needed for hybrid/multi-cloud context) Preferred Certifications Microsoft Certified: Azure Solutions Architect Expert Microsoft Certified: Azure Administrator Associate HashiCorp Terraform Associate Location: Noida/ chennai Work Mode: Hybrid