Azure Cloud Architect

Role : Azure Cloud Architect

Experience : 12-15 years

Location : Gachibowli, Hyderabad

Key Responsibilities

• Own the end-to-end Azure solution architecture for migration and modernization of enterprise applications from on-premises environments to Azure.
• Design Azure architecture for multi-tenant SaaS/application platforms, including appropriate tenant isolation, shared services, identity, data, messaging, and control-plane patterns.
• Define Azure landing zone, subscription, resource group, networking, security, governance, and environment strategy.
• Design hybrid connectivity between on-premises and Azure using technologies such as VPN, ExpressRoute, private endpoints, VNets, routing, NSGs and Azure Firewall.
• Architect secure ingress/egress using Azure Front Door, Application Gateway/WAF, API Management and Azure Firewall, selecting the appropriate service based on traffic patterns and security requirements.
• Design API architecture using Azure API Management, including OAuth2/OIDC, mTLS, certificates, throttling, policies, versioning and API security.
• Evaluate and select appropriate compute platforms including Azure Kubernetes Service (AKS), Azure Container Apps and Azure App Service, considering workload characteristics, operational complexity, scalability and cost.
• Design identity architecture using Microsoft Entra ID, Managed Identities, workload identities, RBAC and service-to-service authentication.
• Architect event-driven and asynchronous integration using Azure Event Hubs, Service Bus, Functions and related messaging patterns.
• Define telemetry and high-volume event ingestion architecture using Event Hubs and Azure Data Explorer (ADX), including partitioning, retention, throughput and tenant identification strategies.
• Design application and operational data solutions covering Azure databases, storage, hot/warm/cold data, archival and long-term retention.
• Define patterns for Service Bus topics/queues, dead-letter handling, retries, idempotency and failure recovery.
• Architect high availability, disaster recovery, backup and multi-region deployment strategies, including North America regional pairing requirements.
• Define observability and monitoring using Azure Monitor, Application Insights, Log Analytics and platform telemetry.
• Establish security architecture aligned with Zero Trust, least privilege, encryption, secrets management, network segmentation and Azure security best practices.
• Drive infrastructure automation using Terraform/Bicep and CI/CD pipelines.
• Define architecture standards, reusable patterns, Architecture Decision Records (ADRs) and technical guardrails.
• Conduct architecture reviews, threat modelling, performance reviews, capacity planning and cost optimization.

Strong hands-on architecture experience with:

• Azure Platform: Azure Landing Zones, subscriptions, VNets, Private Link/Private Endpoints, Azure Firewall, Front Door, Application Gateway/WAF, VPN Gateway and ExpressRoute.
• Application & Compute: AKS, Azure Container Apps, App Service, Functions, containerized workloads, microservices and distributed application architecture.
• API & Integration: Azure API Management, REST APIs, OAuth/OIDC, mTLS, Event Hubs, Service Bus, event-driven architecture and asynchronous messaging.
• Identity & Security: Microsoft Entra ID, Managed Identity, Workload Identity, RBAC, Key Vault, certificates/secrets management and Zero Trust principles.
• Data & Telemetry: Azure Data Explorer (ADX), Azure Storage, relational/NoSQL databases, high-volume telemetry ingestion, data retention and archival strategies.
• DevOps & IaC: Terraform and/or Bicep, Azure DevOps/GitHub Actions, CI/CD, automated environment provisioning and policy-as-code.
• Operations: Azure Monitor, Application Insights, Log Analytics, alerting, SRE/operational readiness, HA/DR, backup and capacity planning.
• Architecture Experience We Are Specifically Looking For

The ideal candidate should be able to confidently design and challenge architectures on Azure:

On-prem Azure connectivity Front Door/WAF API Management APIs/microservices Event Hubs/Service Bus processing services operational and telemetry data stores.

They should also be comfortable making architectural trade-offs such as:

AKS vs Container Apps vs App Service, Front Door vs Application Gateway, Event Hubs vs Service Bus, public vs private connectivity, shared vs tenant-specific infr…