Job Title: Azure Network & Security Architect
Experience: 10+ Years
Notice Period: Immediate to 1 Month
Job Description:
We are seeking a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. The candidate will be responsible for designing, building, securing, and operating production-grade Azure environments aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework principles. The role requires hands-on mastery of Infrastructure as Code (Terraform and/or Bicep), automation, governance, identity, security controls, and scalable network design. The individual will also serve as a technical advisor to stakeholders, lead cloud transformation initiatives, and mentor engineering teams. Solid communication, stakeholder management, documentation, and presentation skills are mandatory.
Enterprise Architecture & Landing Zone
• Design and implement enterprise-grade Azure Landing Zones aligned with: o Microsoft Cloud Adoption Framework (CAF)
o Azure Enterprise-Scale Architecture o Zero Trust Security Model
• Define and implement: o Management Groups hierarchy o Subscription strategy and lifecycle management o Resource organization standards o Naming conventions and tagging strategy o RBAC and identity governance o Policy-driven governance and compliance
• Establish multi-subscription, multi-environment (Prod/Non-Prod/Sandbox) architecture.
Azure Networking
• Architect secure and scalable network topologies: o Hub-and-Spoke / Virtual WAN architectures o ExpressRoute and Site-to-Site VPN connectivity o Private Endpoints and Private DNS Zones o Azure Firewall, NSGs, ASGs, Route Tables o Load Balancers, Application Gateway, Front Door
• Design IP addressing strategy and network segmentation.
• Implement network security controls and traffic inspection models.
• Optimize network performance, availability, and resiliency.