Role Overview:

Role is offshore with remote participation with atleast 5 hours overlap with US business hours for architecture workshops.

Cloud Architecture &

- M&A; Integration (Primary Azure, Secondary AWS):
- Lead M&A; discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity.
- Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations.
- Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments.
- Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments.

Infrastructure &

- Core Network Services:
- Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers.
- Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks.
- Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways.

Security &

- PKI (Public Key Infrastructure):
- Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities.
- Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways,



and API Management services for robust encryption in transit.
- Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages.

Required Technical Skills and Qualifications:

Core Experience:

- Experience: 10 - 12 years in IT infrastructure, with at least 5 years dedicated strictly to cloud architecture.
- M&A; Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions.

Azure Expertise:

- Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints.
- Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization.
- Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates.

Network &

- Security Services:
- Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures.
- Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey).

Preferred &

- Advantageous Skills:
- Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a robust plus.
- Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional

Additional skills on AWS will be an advantage.

📌 Sonata Software - Azure Cloud Architect (India)
🏢 Sonata Software
📍 India