Job Summary

We are looking for a Senior solution architecht, Azure Cloud to own and drive enterprise Azure infrastructure with a strong focus on architecture, resilience, security and compliance and alignment with Microsoft Well-Architected Framework and industry best practices. The ideal candidate brings 6–9 years of deep relavant Azure experience and has a track record of building well-governed, secure, and optimized cloud environments. This role requires someone who doesn’t just build infrastructure but continuously evaluates, hardens, and improves it.

Essential Duties and Responsibilities

- Architecture & Strategy
- Well-Architected Framework + Cloud Adoption Framework (CAF)
- Enterprise-Scale Landing Zones (MG hierarchy, subscription vending)
- Multi-region BCDR design (RTO/RPO, paired regions)
- Architecture Decision Records (ADRs) and design documentation
- Identity (Entra ID)
- Conditional Access (Zero Trust, risk-based)
- PIM, RBAC at scale, access reviews
- Hybrid identity (Entra Connect), B2B/B2C
- Managed identities + Workload Identity for AKS
- Networking
- Hub-spoke / Virtual WAN topologies
- Front Door, App Gateway, WAF, Azure Firewall
- Express Route, VPN, Private Endpoints
- DDoS, Network Watcher, NSG flow logs
- DNS
- Azure Private DNS zones + Private Resolver
- Conditional forwarding, zone links (registration vs resolution)
- Split-horizon / hybrid name resolution
- Certificates & Secrets
- Key Vault — lifecycle, auto-rotation
- Internal CA integration, Managed HSM
- Secret rotation patterns for apps
- Compute & Containers
- AKS — networking modes, Workload Identity, ingress, upgrades
- VMs, VMSS, Bastion, Update Management
- App Service (slots, scaling), Azure Functions
- Container Apps, ACR (geo-replication)
- Integration & PaaS
- API Management (policies, products, versioning)
- Service Bus, Event Grid, Event Hubs
- Logic Apps (Standard / Consumption)
- Data
- Azure SQL / SQL MI, Cosmos DB




- PostgreSQL / MySQL Adaptable Server
- Storage (Blob lifecycle, Files, Net App), replication strategies
- AI & Analytics
- Azure OpenAI / AI Foundry with private endpoints
- RAG patterns, content safety
- AI Search; Synapse / Fabric if in scope
- Security & Compliance
- Defender for Cloud (CSPM/CWPP)
- Microsoft Sentinel (SIEM/SOAR)
- Azure Policy + initiatives, CIS/NIST compliance
- Observability
- Azure Monitor, Log Analytics, App Insights
- KQL for analysis, action groups, auto-remediation
- Azure Resource Graph for inventory
- Cost & Fin Ops
- Rightsizing, RI / Savings Plans
- Tagging, budgets, anomaly alerts
- Fin Ops practice (Inform → Optimize → Operate)
- BCDR
- Azure Site Recovery, immutable backups
- Geo-replication for SQL / Cosmos / Storage
- Regional failover runbooks and DR drills
- Hybrid & Migration
- Azure Arc (servers, K8s, data)
- Azure Migrate, DMS
- 6 R's — rehost / refactor / replatform / rearchitect
- IaC & Dev Ops
- Terraform + Bicep
- YAML pipelines (Azure Dev Ops / Git Hub Actions)
- Policy-as-Code, security scanning (Checkov / tfsec)
- Automation
- Power Shell + Python (Azure SDK)
- Azure Automation (runbooks, hybrid worker)
- Event-driven via Functions / Logic Apps

Additional Responsibilities

Education

- Bachelor's Degree Computer Science required or
- Bachelor's Degree Information System required

Work Experience

- Minimum 5+ years of relevant Azure cloud administration experience.

Preferred Knowledge, Skills and Abilities

- Strong working knowledge of Cloud Adoption Framework and Well-Architected Framework,



applied to design reviews and remediation
- Hands-on proficiency with Python, Power Shell, and Azure CLI for administration, identity management, and automation
- Deep understanding of Entra ID — authentication flows, token lifecycle, Conditional Access evaluation, directory
synchronization
- Solid grasp of PKI — certificate chains, TLS handshake, formats (PFX, PEM, CER), and lifecycle management
- Experience designing DNS resolution strategies across hybrid environments (private zones, conditional forwarding,
split-horizon)
- Working knowledge of hybrid Azure networking — hub-spoke topologies, Express Route / VPN, Private Endpoints, NSG and routing
fundamentals
- Proficiency in Infrastructure-as-Code — Terraform and/or Bicep, including module design and policy-as-code
- Baseline understanding of container platforms (AKS) — networking modes, ingress, workload identity
- Ability to translate Advisor, Defender for Cloud, and Cost Management insights into actionable optimization, security, and
Fin Ops plans
- Strong communication skills — articulating technical trade-offs and driving consensus across engineering and leadership
audiences

License and Certifications

- Desirable AZ-305 — Azure Solutions Architect Expert or other relvant

At YASH, you are empowered to create a career that will take you to where you want to go while working in an inclusive team environment. We leverage career-oriented skilling models and optimize our collective intelligence aided with technology for continuous learning, unlearning, and relearning at a rapid pace and scale.

Our Hyperlearning workplace is grounded upon four principles

- Flexible work arrangements, Free spirit, and emotional positivity
- Agile self-determination, trust, transparency, and open collaboration
- All Support needed for the realization of business goals,
- Stable employment with a great atmosphere and ethical corporate culture

📌 Consultant - Azure Cloud Job (Bengaluru)
🏢 Yash Technologies
📍 Bengaluru