Job Title: Infrastructure Consultant (M365, Azure, GCP & Windows)

Function: Digital & Information Office (DIO) Infrastructure & Operations
Team: Solution Design & End User Services
Reporting to: Director, Infrastructure & Operations (Solution Design & EUS)
Location: Gurgaon/India

Role Purpose – Cloud, Workplace, Automation & Platform Architecture Leadership

The Senior Infrastructure Consultant is a senior handson design authority responsible for leading solution design across Microsoft 365, Azure, Google Cloud Platform (GCP), and the Windows platform estate, with securitybydesign, automation, and optimisation embedded as nonnegotiable principles.

The role exists to materially improve service quality, speed of delivery, and cost efficiency by driving standardisation, automationfirst design, and platform optimisation. Architectures are expected to be secure, resilient, operable, and industrialised, reducing manual effort and enabling Infrastructure Operations teams to deliver at scale.

Operating within the Solution Design team, the role defines targetstate architectures, standards, reference designs, and multiyear roadmaps, and produces highquality, endtoend solution designs that accelerate delivery while lowering operational cost and risk.

This is a senior, credible technical leader role, expected to be the goto authority for modern workplace, cloud platform, and infrastructure automation design across the organisation.

Core Architecture & Design Scope

The role owns architecture and detailed design across the following priority domains:

Microsoft 365 & Modern Workplace

- Architecture and design ownership for Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, and Intune
- Joint design responsibility with the Security function for Entra ID (Azure AD), Microsoft Purview, and Microsoft Defender, encompassing identity and access management architecture, identity governance and privileged access models, data protection, compliance and threat control design, access control models, policy enforcement, logging, and auditability
- Designing securebydesign, automatable contemporary workplace architectures that minimise manual operations
- Defining patterns for identity lifecycle automation, device provisioning, policy enforcement, compliance controls, and selfservice

Azure Cloud Platform

- Architecture and detailed solution design across Azure landing zones, subscriptions, identity integration, networking, security, monitoring, and platform services
- Designing automationfirst Azure architectures, including InfrastructureasCode (IaC), standard pipelines, and policyascode
- Embedding securitybydesign and cost optimisation into landing zones, networking, logging, and control frameworks




- Enabling faster and repeatable environment delivery through standardised designs
- Designing for secure hybrid integration with onprem platforms and other cloud environments

Google Cloud Platform (GCP)

- Solution design and architectural governance for GCP workloads and platform services where used across the estate
- Ensuring consistent automation, security, logging, monitoring, and operational controls across Azure and GCP
- Driving cloudagnostic design patterns that balance platform optimisation with operational simplicity

Windows & Core Platform Services

- Architecture leadership for Windows Server and Windows client platforms, including build standards, lifecycle, hardening, and automation
- Designing securebydefault, automated Windows builds, gold images, patching, vulnerability management, and monitoring patterns
- Reducing operational effort through standardisation, automation, and simplified platform designs
- Strong alignment between Windows, identity, M365, endpoint management, and security tooling designs

Crosscutting Platform & Design Responsibilities

- Securitybydesign across all platforms, including identity flows, interface security, and data protection
- Automation and orchestration by default, replacing manual and ticketdriven processes
- Platform observability, monitoring, logging, and operability patterns
- Backup, recovery, disaster recovery, and cyberresilience by design
- Clear ownership of interfaces, integrations, and data flows across all designs

Key Accountabilities

1. Senior Solution Design Authority

- Act as the lead design authority for M365, Azure, GCP, and Windows architectures
- Own targetstate architectures, principles, standards, and reference designs, explicitly optimised for automation and scale
- Produce and govern highquality endtoend solution designs covering build, run, security, recovery, and automation

2. Security, Resilience, Automation & Operability by Design

- Embed securitybydesign, Zero Trust principles, automation, resilience, recoverability, and auditability into all architectures
- Ensure solutions are highly automatable, operable at scale, and costefficient
- Work in close partnership with Security and Operations teams to balance control with delivery speed

3. Platform Optimisation & Efficiency

- Drive architectural decisions that reduce operating cost,



manual effort, and timetodeliver
- Simplify platforms through standardisation, consolidation, and automationled design
- Eliminate technical debt and architectural patterns that increase operational friction or cost

4. Platform Strategy & Roadmaps

- Define and maintain multiyear architecture roadmaps aligned to service improvement, automation, and cost efficiency
- Translate strategy into investable initiatives with measurable operational and financial benefit

5. Collaboration & Technical Leadership

- Work closely with Enterprise Architecture, Security, Engineering, and Operations teams
- Resolve crossdomain dependencies early through strong architectural ownership
- Mentor engineers and designers, raising overall design, automation, and efficiency maturity

6. Vendor & Partner Design Leadership

- Act as a senior technical and security counterweight to vendors and SI partners
- Challenge vendor designs to ensure they deliver automation, cost efficiency, and operational sustainability

7. Design Governance Through Delivery

- Ensure architectural intent survives from design through automation and into BAU
- Act as escalation point for complex, highrisk, or costsensitive design decisions

Skills & Experience

Essential

- Deep, practical experience designing and running Microsoft 365 and Azure in complex enterprise environments
- Strong design authority across Windows platforms (server and client)
- Proven experience delivering automationled infrastructure and platform designs
- Experience owning endtoend solution designs with measurable service, speed, and cost improvements
- Ability to balance security, resilience, automation, operability, and cost pragmatically

Highly Desirable

- Experience designing or governing GCP platforms alongside Azure
- Background in regulated, largescale, or postincident transformation environments
- Experience defining IaC, selfservice, platform engineering, and Zero Trust / IAM architectures

Success Measures

- Measurable improvement in service stability and quality
- Faster timetodeliver through standardised and automated designs
- Reduced operating cost and manual effort across Infrastructure Operations
- Platforms that are securebydesign, automated, standardised, and scalable
- High confidence from engineering, operations, and security teams in Solution Design outputs

Personal Behaviours

The role models Colt’s behaviours, owns outcomes endtoend, and operates with integrity and clarity. The successful candidate is outcomefocused, comfortable taking responsibility for hard architectural, security, and cost tradeoff decisions, and is trusted as a senior technical leader across the organisation.

📌 IT Infrastructure ArchitectGCP, Azure (Gurugram)
🏢 Colt Technology Services
📍 Gurugram