Azure Infrastructure Architect
Job Description
About Company
Birlasoft, a global leader at the forefront of Cloud, AI, and Digital technologies, seamlessly blends domain expertise with enterprise solutions. The company’s consultative and design-thinking approach empowers societies worldwide, enhancing the efficiency and productivity of businesses. As part of the multibillion-dollar diversified CKA Birla Group, Birlasoft with its 12,000+ professionals, is committed to continuing the Group’s 170-year heritage of building sustainable communities.
Azure Infrastructure Architect
Role Summary
The Azure Infrastructure Architect is responsible for designing, governing, and optimizing enterprise-scale Azure infrastructure platforms. The role covers end‑to‑end architecture , secure configuration , cost optimization (FinOps) , and operational excellence , ensuring scalable, secure, resilient, and cost‑effective cloud environments aligned with business and compliance requirements.
Key Responsibilities
1. Azure Architecture & Design
- Design enterprise-grade Azure architectures aligned with Microsoft Well‑Architected Framework.
- Define subscription strategy, management groups , and Azure Landing Zones (hub‑and‑spoke, shared services).
- Create High-Level Design (HLD) and Low-Level Design (LLD) for Azure infrastructure solutions.
- Architect solutions for high availability, scalability, backup, and disaster recovery .
- Select appropriate Azure services (IaaS, PaaS, Hybrid) based on workload needs.
- Review and approve infrastructure designs from projects and delivery teams.
2. Infrastructure Configuration & Build
- Lead configuration of core Azure components:
- Virtual Networks, Subnets, NSGs, Route Tables
- Azure Firewall, Application Gateway, Load Balancers
- Virtual Machines, Scale Sets, Storage Accounts
- Azure Backup and Site Recovery
- Implement Hybrid connectivity (VPN, ExpressRoute).
- Standardize infrastructure using Infrastructure as Code (IaC) :
- Bicep / ARM (preferred)
- Terraform (good to have)
- Enable CI/CD pipelines for infrastructure deployments using Azure DevOps / GitHub Actions .
3. Security, Identity & Governance
- Define and enforce security-by-design principles.
- Design Identity & Access Management (IAM) :
- Microsoft Entra ID (Azure AD)
- RBAC, Privileged Identity Management (PIM)
- Managed Identities
- Implement network security:
- Private Endpoints
- Zero Trust architecture concepts
- Configure governance controls:
- Azure Policies
- Blueprints (where applicable)
- Resource naming standards and tagging
- Ensure compliance with regulatory and enterprise security standards (ISO, SOC, GDPR, etc.).
- Integrate Key Vault for secrets, certificates, and keys.
4. Cost Optimization & FinOps
- Own Azure cost governance and optimization strategy.
- Design cost‑efficient architectures using:
- Right-sizing
- Reserved Instances / Savings Plans
- Auto-scaling
- Storage tiering
- Monitor and manage costs using:
- Azure Cost Management
- Budgets and alerts
- Chargeback / showback models
- Conduct FinOps assessments and provide actionable optimization recommendations.
- Work with finance and program teams to forecast and control cloud spend.
5. Monitoring, Operations & Reliability
- Design and enable observability :
- Azure Monitor, Log Analytics, Alerts
- Operational dashboards
- Ensure platform reliability, availability, and performance.
- Act as Level‑3 / Level‑4 escalation support for infra-related incidents.
- Drive continuous improvement through automation and preventive controls.
- Define operational runbooks and standard operating procedures (SOPs).
6. Migration & Transformation
- Lead Azure migration and modernization initiatives:
- On‑prem to Azure
- Data center exit programs
- Define migration approaches (Lift & Shift, Re‑platform, Re‑architect).
- Validate readiness, sizing, and risk mitigation.
- Ensure smooth transition to support/AMS teams post‑migration.
7. Stakeholder & Leadership Responsibilities
- Collaborate with Enterprise Architects, Security Teams, Network Teams, DevOps, and Application Teams .
- Provide technical leadership, guidance, and mentoring to infra engineers.
- Support pre‑sales, RFPs, cost estimations , and solution walk‑throughs.
- Communicate architecture decisions clearly to both technical and non‑technical stakeholders.
Required Skills & Experience
Core Skills
- 10+ years of infrastructure experience with 5+ years in Azure .
- Strong hands‑on expertise in:
- Azure Networking
- Compute & Storage
- Identity & Security
- Governance & Landing Zones
- Proven experience in large‑scale Azure environments.
Tools & Technologies
- Azure ARM / Bicep
- Azure DevOps / GitHub Actions
- PowerShell / Bash
- Azure Monitor & Log Analytics
- Terraform (good to have)
Certifications (Preferred)
- Microsoft Certified: Azure Solutions Architect Expert (AZ‑305)
- Microsoft Certified: Azure Administrator Associate
- AZ‑900 (Azure Fundamentals)
Soft Skills
- Strong architectural thinking and problem‑solving skills
- Excellent documentation and communication abilities
- Ability to influence and guide senior stakeholders
- Cost‑aware and business‑oriented mindset