Roles & responsibilities
Role Purpose
Design, build, and govern secure, resilient, and scalable cloud/hybrid
infrastructure on Microsoft Azure, integrating on‑prem and platform services.
The role blends Infrastructure Architecture & Operations with Infrastructure
Security & Compliance, ensuring Zero Trust, policy‑as‑code, and operational
excellence across identity, network, compute, containers (AKS), storage, backup,
observability, and disaster recovery
Key Responsibilities
A. Infrastructure Architecture & Operations
Own the Azure landing zone (CAF‑aligned) and hub‑spoke network design
(ExpressRoute/VPN, Private DNS, Private Endpoints).
Define standards for compute, storage, databases, and platform services
(VM/VMSS, images, disks, files, backups, SQL/MI).
AKS Platform Ownership (Mandatory):
Design AKS clusters (node pools, taints/tolerations, zoning, multi‑region DR),
Azure CNI/Overlay networking, and ingress (NGINX/App Gateway).
Establish lifecycle practices for upgrades, autoscaling (HPA/VPA, Cluster
Autoscaler), image management (ACR), and workload placement.




Integrate platform services (Key Vault, Managed Identities, Private Link) and
ensure operational SLOs.
Lead modernization/migration for Windows/Linux workloads and data platforms;
ensure resilience, cost efficiency, and operational readiness.
Establish BCDR strategy—RTO/RPO targets, automated recovery runbooks, DR
rehearsals, and evidence packs.
Build observability: Azure Monitor, Log Analytics, Application Insights,
synthetic checks, and incident runbooks.
Drive FinOps: tagging, showback/chargeback, rightsizing, reservations/savings
plans, and lifecycle policies.
B. Infrastructure Security & Compliance
Implement Zero Trust across identity, device, network, and data: RBAC, PIM,
Conditional Access/MFA, workload identities.
Design network security: NSG/ASG, Azure Firewall/WAF, micro‑segmentation, DDoS
Protection, egress control, DNS security.
AKS Security (Mandatory):
Entra ID/RBAC integration, Pod Security A

📌 Associate Director-GDC (Hyderabad)
🏢 KPMG Global Services
📍 Hyderabad