[Hiring] Azure Network and Security Architect @N Consulting Ltd

Role Description

We are seeking a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. The candidate will be responsible for designing, building, securing, and operating production-grade Azure environments aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework principles. The role requires hands-on mastery of Infrastructure as Code (Terraform and/or Bicep), automation, governance, identity, security controls, and scalable network design. The individual will also serve as a technical advisor to stakeholders, lead cloud transformation initiatives, and mentor engineering teams. Strong communication, stakeholder management, documentation, and presentation skills are mandatory.

Qualifications

• Strong hands-on expertise with Microsoft Azure platform (IaaS, PaaS, Networking, Security)
• Azure Landing Zone design and deployment
• Enterprise networking architectures
• Identity and access management
• Azure security tooling and governance
• Expert-level proficiency in Terraform and/or Bicep
• Git-based workflows
• CI/CD pipelines for infrastructure
• Deep knowledge of TCP/IP, DNS, routing, firewall concepts
• Hybrid connectivity models
• Cloud security best practices
• Infrastructure automation patterns
• Experience working in multi-subscription, enterprise environments

Requirements

• Design and implement enterprise-grade Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF), Azure Enterprise-Scale Architecture, and Zero Trust Security Model
• Define and implement management groups hierarchy, subscription strategy, resource organization standards, naming conventions, tagging strategy, RBAC and identity governance, policy-driven governance and compliance
• Establish multi-subscription, multi-environment (Prod/Non-Prod/Sandbox) architecture
• Architect secure and scalable network topologies including Hub-and-Spoke / Virtual WAN architectures, ExpressRoute, Site-to-Site VPN connectivity, Private Endpoints, Azure Firewall, NSGs, ASGs, Route Tables, Load Balancers, Application Gateway, Front Door
• Implement network security controls and traffic inspection models
• Optimize network performance, availability, and resiliency
• Implement enterprise security posture using Microsoft Defender for Cloud, Azure Policy and Initiative assignments, Azure Blueprints, Conditional Access, Identity Protection, and Privileged Identity Management (PIM)
• Design secure identity architecture using Entra ID (Azure AD), RBAC models, and least-privilege access
• Ensure compliance with regulatory standards (ISO, SOC2, CIS, NIST – as applicable)
• Establish logging, monitoring, SIEM integration, and audit controls
• Develop reusable, modular Infrastructure-as-Code using Terraform (preferred) and/or Bicep
• Create standardized deployment pipelines using Azure DevOps / GitHub Actions
• Implement CI/CD practices for infrastructure delivery
• Enforce version control, peer reviews, testing, and promotion pipelines
• Automate provisioning, governance, security baselines, and guardrails
• Design for high availability, disaster recovery, backup, and recovery
• Implement observability using Azure Monitor, Log Analytics, Application Insights
• Enable cost governance, budgeting, chargeback/showback models, rightsizing, and optimization
• Translate business requirements into technical architecture
• Produce high-quality architecture documentation, diagrams, and runbooks
• Lead technical discussions with customers, auditors, security teams, and delivery teams
• Mentor junior engineers and promote engineering excellence
• Participate in design reviews, audits, and governance forums

Benefits

• Salary: 4000000 - 5000000 INR Per annum
• Locations: Anywhere in India
• Experience: 10+ years