Experience

8-12 Years

Location: Preferred in Noida but open to any location if he can travel based on business need to Singapore

Role Summary

We are looking for a hands-on Azure Cloud Architect who can design, implement, and support enterprise Azure cloud environments. The ideal candidate should have practical experience with Azure Landing Zones, cloud networking, governance, and Infrastructure as Code. This role will work closely with global teams to deliver cloud transformation initiatives for enterprise customers.

This is a hands-on role requiring strong engineering skills, Infrastructure-as-Code (IaC), and the ability to work across teams (network/security/app/devops).

Key Responsibilities

1. Azure Landing Zone (Platform)

Implement and enhance the Azure Landing Zone aligned with Microsoft CAF/ALZ principles:

- Management Groups hierarchy and subscription strategy
- Standardized resource organization, naming, tagging, and guardrails
- RBAC model, role assignments, PIM (if applicable), and access governance
- Azure Policy / initiatives for compliance and enforcement

Establish repeatable onboarding patterns for recent subscriptions and workloads.

2) Azure Networking & Hybrid Connectivity (Core)

Design and operate enterprise Azure networking (commonly hub-spoke or similar):

- VNets, subnets, UDRs, NSGs, route tables, private DNS
- Connectivity via IPSec VPN / ExpressRoute (where applicable)
- Integration with enterprise routing / firewall controls and static routes (as required)

Implement/operate secure inbound/outbound patterns (e.g., Azure Firewall / NVA, NAT, proxy,



private endpointsbased on standards).

3) Security, Governance & Compliance

Implement platform security controls:

- RBAC best practices, least privilege, access reviews
- Policy-based governance for baseline security & compliance
- Secure configuration standards for networking and platform resources

Support security monitoring and remediation in collaboration with SecOps.

4) Observability & Operations Enablement

Implement monitoring and logging baselines:

- Azure Monitor, Log Analytics, alerting, dashboards
- Standard diagnostics settings for platform services and subscriptions

- Create operational runbooks and support readiness:

- Incident troubleshooting guides, escalation paths, platform documentation

- Provide L2/L3 engineering support for the platform (as needed), including RCA and problem management.

5) Infrastructure Automation / DevOps (IaC First)

- Build and maintain IaC modules and pipelines for repeatable deployment:
- Terraform and/or Bicep/ARM
- CI/CD using Azure DevOps (or GitHub Actions if applicable)

- Develop reusable templates/modules for:

- Subscription vending/onboarding
- Network baseline deployment
- Policy/RBAC/diagnostics baselines





6) Stakeholder & Technical Leadership

- Act as a technical lead for the platform workstream:
- Collaborate with network, security, and application teams
- Guide application teams on onboarding, patterns, and guardrails
- Contribute to platform standards, reference architectures, and decision logs

Required Skills

- 812 years of IT experience with minimum 5 years in Azure Cloud.
- Hands-on experience with
- Microsoft Azure Platform Engineering
- Azure Landing Zone (ALZ)
- Azure Management Groups & Subscription Management
- Azure RBAC & Azure Policy
- Azure Networking (VNet, NSG, UDR, VPN/ExpressRoute)
- Terraform (Primary IaC Skill)
- Bicep or ARM Templates
- Azure DevOps Pipelines
- Azure Monitor & Log Analytics
- Cloud Security & Governance
- CI/CD & Git
- L2/L3 Azure Platform Troubleshooting

Preferred Skills

Experience with Azure Landing Zone (ALZ) reference implementation / CAF

- Private connectivity patterns: Private Endpoints, private DNS zones, egress control patterns
- Security tooling exposure (depending on your environment): Microsoft Defender for Cloud, Sentinel
- Experience with Azure DevOps administration (agents, permissions, service connections)
- Basic knowledge of AWS (only if needed for hybrid/multi-cloud context)

Preferred Certifications

- Microsoft Certified: Azure Solutions Architect Expert
- Microsoft Certified: Azure Administrator Associate
- HashiCorp Terraform Associate

Location: Noida/ chennai

Work Mode: Hybrid

📌 Azure Cloud Architect (Noida)
🏢 Mindpool Technologies
📍 Noida