Job role : Azure Cloud Architect
Experience : 12- 15 years
Location : Hyderabad
Key Responsibilities
- Own the end-to-end Azure solution architecture for migration and modernization of enterprise applications from on-premises environments to Azure.
- Design Azure architecture for multi-tenant SaaS/application platforms, including appropriate tenant isolation, shared services, identity, data, messaging, and control-plane patterns.
- Define Azure landing zone, subscription, resource group, networking, security, governance, and environment strategy.
- Design hybrid connectivity between on-premises and Azure using technologies such as VPN, ExpressRoute, private endpoints, VNets, routing, NSGs and Azure Firewall.
- Architect secure ingress/egress using Azure Front Door, Application Gateway/WAF, API Management and Azure Firewall, selecting the appropriate service based on traffic patterns and security requirements.
- Design API architecture using Azure API Management, including OAuth2/OIDC, mTLS, certificates, throttling, policies, versioning and API security.
- Evaluate and select appropriate compute platforms including Azure Kubernetes Service (AKS), Azure Container Apps and Azure App Service, considering workload characteristics, operational complexity, scalability and cost.
- Design identity architecture using Microsoft Entra ID, Managed Identities, workload identities, RBAC and service-to-service authentication.
- Architect event-driven and asynchronous integration using Azure Event Hubs, Service Bus, Functions and related messaging patterns.
- Define telemetry and high-volume event ingestion architecture using Event Hubs and Azure Data Explorer (ADX), including partitioning, retention, throughput and tenant identification strategies.
- Design application and operational data solutions covering Azure databases, storage, hot/warm/cold data, archival and long-term retention.
- Define patterns for Service Bus topics/queues, dead-letter handling, retries, idempotency and failure recovery.
- Architect high availability, disaster recovery, backup and multi-region deployment strategies, including North America regional pairing requirements.
- Define observability and monitoring using Azure Monitor, Application Insights, Log Analytics and platform telemetry.
- Establish security architecture aligned with Zero Trust, least privilege, encryption, secrets management, network segmentation and Azure security best practices.
- Drive infrastructure automation using Terraform/Bicep and CI/CD pipelines.
- Define architecture standards, reusable patterns, Architecture Decision Records (ADRs) and technical guardrails.
- Conduct architecture reviews, threat modelling, performance reviews, capacity planning and cost optimization.
- Work closely with application engineering, DevOps, security, data and product teams to translate architecture into an executable migration roadmap.
- Provide hands-on technical guidance during implementation, troubleshooting and production readiness.
Required Technical Skills
- Strong hands-on architecture experience with:
- Azure Platform: Azure Landing Zones, subscriptions, VNets, Private Link/Private Endpoints, Azure Firewall, Front Door, Application Gateway/WAF, VPN Gateway and ExpressRoute.
- Application & Compute: AKS, Azure Container Apps, App Service, Functions, containerized workloads, microservices and distributed application architecture.
- API & Integration: Azure API Management, REST APIs, OAuth/OIDC, mTLS, Event Hubs, Service Bus, event-driven architecture and asynchronous messaging.
- Identity & Security: Microsoft Entra ID, Managed Identity, Workload Identity, RBAC, Key Vault, certificates/secrets management and Zero Trust principles.
- Data & Telemetry: Azure Data Explorer (ADX), Azure Storage, relational/NoSQL databases, high-volume telemetry ingestion, data retention and archival strategies.
- DevOps & IaC: Terraform and/or Bicep, Azure DevOps/GitHub Actions, CI/CD, automated environment provisioning and policy-as-code.
- Operations: Azure Monitor, Application Insights, Log Analytics, alerting, SRE/operational readiness, HA/DR, backup and capacity planning.
Architecture Experience We Are Specifically Looking For
The ideal candidate should be able to confidently design and challenge architectures on Azure:
On-prem → Azure connectivity → Front Door/WAF → API Management → APIs/microservices → Event Hubs/Service Bus → processing services → operational and telemetry data stores.
They should also be comfortable making architectural trade-offs such as:
AKS vs Container Apps vs App Service, Front Door vs Application Gateway, Event Hubs vs Service Bus, public vs private connectivity, shared vs tenant-specific infrastructure, and centralized vs distributed data/storage patterns.
Required Experience
- 10+ years in software/cloud/infrastructure engineering with significant architecture responsibility.
- 5+ years of hands-on Microsoft Azure architecture experience.
- Proven experience designing enterprise-scale Azure platforms.
- Experience with multi-tenant SaaS or distributed application architectures.
- Experience migrating workloads from OCI, AWS, data centers or on-premises environments to Azure.
- Strong understanding of cloud networking, security, identity and integration architecture.
- Experience with high-volume event/telemetry platforms is highly desirable.
- Ability to produce HLDs, LLDs, architecture diagrams, ADRs, deployment patterns and migration roadmaps.
- Strong stakeholder communication skills with the ability to explain architecture decisions to both engineering teams and senior stakeholders.
Preferred Qualifications
Microsoft Azure architecture certifications such as AZ-305 / Azure Solutions Architect Expert are preferred. Experience with Terraform, Kubernetes/AKS, Azure Well-Architected Framework, Cloud Adoption Framework, FinOps and enterprise-scale Azure governance would be advantageous.