Description

Design, implement, and govern enterprise-grade Azure Landing Zones, networking, security, and Infrastructure as Code pipelines.

This role is on-site.

Responsibilities

• Architect enterprise Azure Landing Zones aligned with Cloud Adoption Framework, defining management groups, subscription strategies, and governance standards.
• Design secure, scalable network topologies including Hub-and-Spoke, Virtual WAN, ExpressRoute, and private endpoint configurations.
• Implement identity and access management using Entra ID, RBAC, PIM, and Conditional Access to enforce least-privilege principles.
• Develop modular Infrastructure as Code using Terraform or Bicep, integrating CI/CD pipelines via Azure DevOps or GitHub Actions.
• Establish observability and cost governance using Azure Monitor, Log Analytics, and Cost Management tools.

Required Skills

• 15+ years of IT experience with deep expertise in Microsoft Azure platform services.
• Hands-on mastery of Azure Networking, including TCP/IP, DNS, routing, firewalls, and hybrid connectivity models.
• Expert-level proficiency in Infrastructure as Code, specifically Terraform and/or Bicep.
• Strong experience with CI/CD pipelines for infrastructure delivery using Azure DevOps or GitHub Actions.
• Proven track record in Azure Security, including Defender for Cloud, Azure Policy, and compliance frameworks.
• Ability to translate business requirements into technical architecture and produce detailed documentation.
• Experience leading technical discussions and mentoring junior engineers in enterprise environments.

Preferred Skills

• Deep knowledge of Zero Trust Security Model and Enterprise-Scale Architecture principles.
• Familiarity with regulatory standards such as ISO, SOC2, CIS, or NIST.

Referral Bonus: ₹50,000

Key Skills

Education

Any Graduate