Description

Design and operate secure, scalable Azure enterprise architectures, focusing on landing zones, networking, and security governance.

This role is on-site.

Responsibilities

• Architect enterprise-grade Azure Landing Zones aligned with Cloud Adoption Framework and Zero Trust models.
• Design secure network topologies including Hub-and-Spoke, Virtual WAN, ExpressRoute, and Private Endpoints.
• Implement identity and access management using Entra ID, RBAC, and Privileged Identity Management.
• Develop Infrastructure-as-Code using Terraform or Bicep with CI/CD pipelines in Azure DevOps or GitHub Actions.
• Establish monitoring, logging, and cost governance using Azure Monitor, Log Analytics, and Cost Management.

Required Skills

• 10+ years of experience in cloud architecture, with deep expertise in Microsoft Azure.
• Strong hands-on knowledge of Azure Networking, including TCP/IP, DNS, routing, and firewalls.
• Proficiency in Infrastructure-as-Code tools: Terraform and/or Bicep.
• Experience with identity services: Entra ID (Azure AD), Conditional Access, and RBAC.
• Familiarity with security tools: Microsoft Defender for Cloud, Azure Policy, and Blueprints.
• Ability to create and manage CI/CD pipelines using Azure DevOps or GitHub Actions.
• Understanding of Git workflows and version control for infrastructure.
• Experience with enterprise-scale multi-subscription environments and hybrid connectivity.

Preferred Skills

• Certification in Microsoft Azure Solutions Architect Expert or similar.
• Experience with regulatory compliance standards (ISO, SOC2, CIS, NIST).

Key Skills

Education

Any Graduate