Cloud Architect

Diverse Lynx India

🇮🇳 India

On-site

Staff / Principal

2 months ago

Azure Cloud
Azure
IaC
Terraform
Azure AD
RBAC
Zero Trust
OData
AKS
Node.js
NGINX
TLS
WAF
Cilium
Key Vault
GitHub
Devops

2 months ago

Auto apply with Likeremote

Not scoredNo CV on file. Upload one and this job gets a score out of 100.Upload CV

Role Descriptions: Define and lead Azure cloud architecture and landing zone designEstablish enterprise governance framework| including:oManagement Group hierarchyoSubscription designoNaming/tagging standardsoCost management strategiesDesign and enforce Azure Policy and security guardrailsDefine IaC standards and patterns (Terraform/ARM Template| no manual deployments)Architect secure cloud environments| including:oIdentity & access architecture (Azure AD| RBAC)oNetwork topology (hub-spoke| zero trust and other best practices)oData protection and encryption strategiesPartner with engineering teams to ensure architecture is implemented correctlyReview and approve infrastructure designs and deploymentsDrive cloud best practices| reusable modules| and automation frameworksProvide leadership in cloud transformation and migration initiativesEnsure compliance with regulatory| security| and enterprise standardsMentor engineers and establish technical governance processes and adhere to company policy
Essential Skills: Define the target reference architecture for greenfield AKS clusters along with engineering team and ensure how bluefield cluster remain undisruptive: control plane choices| private clusters| node pool strategy| upgrade/runway| and regional topology. Lead design for NGINX Azure Managed Gateway API: HTTPRoute/Gateway modeling| TLS/WAF strategy| policy attachments| and weighted/canary traffic for cutover. Architect kubenet Azure CNI (Cilium) migration with new clusters with Engineering team: IP planning| subnet sizing| pod density| surge capacity| cordon/drain and service-by-service move plan.Choose/validate dataplane features: Cilium network policy| kube proxy replacement (if enabled)| Hubble visibility| and implications on performance/SNAT. Standardize identity/secrets: Azure - Key Vault + CSI; cert lifecycle (Key Vault and/or Gateway API).Establish platform guardrails: Azure Policy| RBAC least privilege| multi tenancy boundaries (namespace/project isolation). Define/Follow the GitHub standards: reusable workflows| CODEOWNERS| branch protections| environment approvals| and artifact provenance/signing. Own non functional requirements: SLOs| HA/DR| capacity modeling| performance budgets| and failover patterns for ingress and data plane. Govern delivery: roadmap| cutover criteria| readiness gates; mentor Platform/DevOps on architectural compliance.
Desirable Skills: Cloud Architect
Keyword: ~Cloud Architect~
Skills: Digital : DevOps
Experience Required: 8-10

Cloud Architect · Diverse Lynx India

Auto apply with Likeremote