Cloud Security Architect

The Cloud Architect leads the design, implementation, and governance of primarily Azure-based infrastructure and services across a hybrid cloud environment including a limited AWS environment. This role ensures secure, scalable, and compliant cloud operations, emphasizing IaaS and PaaS models, automation, and collaboration with Cloud-Ops and enterprise data teams.

• Architect secure and scalable Azure environments using hub-and-spoke topology, private endpoints, and managed identities.
• Design and document high-level and low-level architecture (HLD/LLD), SOPs, and RCA reports for Azure deployments.
• Lead modernization efforts, including migration from legacy systems to Azure-native services.
• Oversee Azure IaaS and PaaS services including Key Vault, Synapse, Data Factory, Databricks, Apache Spark, SQL MI, APIM, App Gateway, and App Services.
• Implement and enforce cloud security, cost management, and compliance protocols in coordination with cybersecurity teams.
• Collaborate with monitoring teams to triage alerts and ensure timely incident resolution.
• Support disaster recovery (DR) and business continuity planning (BCP) across Azure regions.
• Align cloud solutions with business goals through partnership with Infrastructure Architects, Cloud SMEs, and Service Delivery Managers.
• Provide architectural guidance to DevOps and application teams on CI/CD pipelines and Terraform code.
• Participate in technical evaluations and interviews for cloud resources.
• Troubleshoot complex failures and recommend solutions for third-party cloud platforms.
• Design and configure network connectivity across cloud regions.
• Create and maintain Infrastructure as Code (IaC) for cloud resource deployment and maintenance.
• Track cloud resources, costs, and cost attribution.

Experience in Azure cloud architecture and operations. Deep knowledge of Azure services: Compute, ADF, Key Vault, Blob Storage, Azure SQL MI, Databricks, APIM, App Gateway, App Service Plans, App Services, Function Apps, Logic Apps, AVD, Azure Backup, Azure Monitor, Log Analytics Workspace, App Insights. Experience with Terraform, Azure DevOps, and automation of infrastructure provisioning. Strong understanding of Zero Trust principles, network security groups, VNets, network virtual appliances, and ExpressRoute. Familiarity with Microsoft Purview, Entra ID, and governance workflows.

For applications and inquiries, contact:View email address on us.fitly.work