Cloud Architect

Cloud Architect Job Description

Job Summary

The Cloud Architect leads the design, implementation, and governance of primarily Azure-based infrastructure and services across a hybrid cloud environment including a limited AWS environment. This role ensures secure, scalable, and compliant cloud operations, emphasizing IaaS and PaaS models, automation, and collaboration with Cloud-Ops and enterprise data teams.

Key Responsibilities

• Architect secure and scalable Azure environments using hub-and-spoke topology, private endpoints, and managed identities.
• Design and document high-level and low-level architecture (HLD/LLD), SOPs, and RCA reports for Azure deployments.
• Lead modernization efforts, including migration from legacy systems to Azure-native services.
• Oversee Azure IaaS and PaaS services including Key Vault, Synapse, Data Factory, Databricks, Apache Spark, SQL MI, APIM, App Gateway, and App Services.
• Implement and enforce cloud security, cost management, and compliance protocols in coordination with cybersecurity teams.
• Collaborate with monitoring teams to triage alerts and ensure timely incident resolution.
• Support disaster recovery (DR) and business continuity planning (BCP) across Azure regions.
• Align cloud solutions with business goals through partnership with Infrastructure Architects, Cloud SMEs, and Service Delivery Managers.
• Provide architectural guidance to DevOps and application teams on CI/CD pipelines and Terraform code.
• Participate in technical evaluations and interviews for cloud resources.
• Troubleshoot complex failures and recommend solutions for third-party cloud platforms.
• Design and configure network connectivity across cloud regions.
• Create and maintain Infrastructure as Code (IaC) for cloud resource deployment and maintenance.
• Track cloud resources, costs, and cost attribution.

Required Skills & Experience

• 7+ years of experience in Azure cloud architecture and operations.
• Deep knowledge of Azure services: Compute, ADF, Key Vault, Blob Storage, Azure SQL MI, Databricks, APIM, App Gateway, App Service Plans, App Services, Function Apps, Logic Apps, AVD, Azure Backup, Azure Monitor, Log Analytics Workspace, App Insights.
• Experience with Terraform, Azure DevOps, and automation of infrastructure provisioning.
• Strong understanding of Zero Trust principles, network security groups, VNets, network virtual appliances, and ExpressRoute.
• Familiarity with Microsoft Purview, Entra ID, and governance workflows.

Preferred Certifications

• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Azure Security Engineer Associate
• ITIL Foundation or higher

Soft Skills

• Excellent communication and stakeholder engagement.
• Strong analytical and troubleshooting abilities.
• Ability to lead cross-functional teams and mentor junior engineers.

Key Technologies

• Azure Core Services: Compute, Key Vault, Storage
• Data & Analytics: Synapse, Data Factory, Databricks, Apache Spark, SQL MI
• Security & Identity: Managed Identities, RBAC, Entra ID, Zero Trust Architecture
• Infrastructure & Networking: Hub-and-Spoke topology, Private Endpoints, NSGs, ExpressRoute, Virtual Network Appliances
• Automation & DevOps: Terraform, Azure DevOps, CI/CD pipelines
• Monitoring: Azure Monitor, Log Analytics Workspace, App Insights
• Governance & Compliance: Microsoft Purview, DR/BCP planning, cost management policies