The IT Infrastructure Solution Architect, Cloud & Datacenter, Global is responsible for designing, governing, and optimizing secure, scalable, and high-performing hybrid and cloud infrastructure. The role ensures alignment between cloud, data center architecture and business outcomes, leading the transition from traditional infrastructure to cloud first, automation driven platforms. Working closely with internal stakeholders and external Managed Service Providers (MSPs), this role provides technical leadership, architectural guidance, and governance for cloud and infrastructure solutions that support current operations and future growth in a secure manner.

PRIMARY DUTIES AND RESPONSIBILITIES

Cloud a and Datacenter architecture and strategy: Define and maintain cloud-centric infrastructure architecture standards spanning IaaS/PaaS/Saas, identity, networking, security, and connectivity to on premises environments.

Solution design: Design and document end-to-end infrastructure solutions including compute, storage, identity, networking, security, monitoring, and resiliency for both cloud and hybrid scenarios.

Cloud migration and modernization: Lead cloud migration, consolidation, and modernization initiatives, ensuring minimal disruption and alignment with cloud best practices and cost optimization.

Identity and access architecture: Architect Active Directory and Entra ID solutions, including hybrid identity, domain consolidation, federation, conditional access, privileged access, and identity security controls.

Design and evolve a global Landing Zone, including China: Develop a scalable, secure, and policy-driven Landing Zones in cloud aligned with industry best practices,



ensuring it supports global workloads as well as region-specific requirements in China. Define management groups, subscription strategy, governance policies, identity patterns, and network topology that accommodate future growth and business needs of Olympus.

Cloud networking and connectivity: Oversee implementation of secure, resilient networking architectures including Virtual Networks, ExpressRoute/S2S VPN, firewalls, DNS/DHCP, SD WAN, and network segmentation.

Security, compliance, and governance: Ensure all solutions comply with cybersecurity standards, Zero Trust principles, data protection requirements, and governance policies (including RBAC, policies, blueprints, and tagging).

Business continuity and resilience: Define and validate backup, and high availability strategies for critical workloads, leveraging cloud-native capabilities where possible.

Automation and Infrastructure as Code (IaC): Promote and guide the use of IaC (e.g. Bicep, ARM, Terraform) and automation (e.g. Automation, PowerShell) to standardize deployments and reduce operational risk.

Vendor and MSP collaboration and Service strategy: Collaborate with vendors and MSPs to ensure consistent delivery, adherence to architectural standards, and effective operational handover.

Documentation and knowledge sharing: Create and maintain high-quality design documentation, including reference architectures, solution blueprints, HLDs/LLDs,



RACI charts, and operational runbooks.

Site and facility enablement: Support the setup of new offices, R&D;, or manufacturing sites, ensuring secure connectivity, domain join, and integration with cloud-based services.

Stakeholder engagement: Act as a trusted advisor to business and IT stakeholders, translating business requirements into technical solutions and presenting complex concepts in clear, business-friendly language.

Technical Competencies

Cloud platforms (primary focus on Azure): Proven experience designing and implementing Azure IaaS/PaaS services, including: Virtual Machines, Availability Sets/Zones Virtual Networks, NSGs, Azure Firewall, Application Gateway Azure / AWS/ Oracle / Google Storage, Backup, Site Recovery

Monitor, Log Analytics, Sentinel (advantageous)

Identity and access management:

Active Directory and Entra ID architecture and administration Hybrid identity (synchronization, federation), domain trusts Conditional Access, MFA, Privileged Identity Management (PIM) and identity security best practices

Infrastructure and networking:

Windows Server (2016/2019/2022/2025) design, hardening, and administration

Enterprise networking: LAN/WAN, SD WAN, VLANs, DNS/DHCP, routing/switching, firewalls, VPN

Network segmentation and Zero Trust-aligned designs

Security and compliance: Strong understanding of infrastructure and cloud security frameworks and best practices Experience with security baselines, hardening guides, and secure configuration standards

Documentation and design: Ability to produce explicit, consumable architecture documentation, standards, patterns, and implementation guidelines.

📌 IT Infrastructure Solution Architect, Cloud & Datacenter, Global (Hyderabad)
🏢 Olympus
📍 Hyderabad