Cloud Architect

Role Descriptions: Define and lead Azure cloud architecture and landing zone designEstablish enterprise governance framework| including:oManagement Group hierarchyoSubscription designoNaming/tagging standardsoCost management strategiesDesign and enforce Azure Policy and security guardrailsDefine IaC standards and patterns (Terraform/ARM Template| no manual deployments)Architect secure cloud environments| including:oIdentity & access architecture (Azure AD| RBAC)oNetwork topology (hub-spoke| zero trust and other best practices)oData protection and encryption strategiesPartner with engineering teams to ensure architecture is implemented correctlyReview and approve infrastructure designs and deploymentsDrive cloud best practices| reusable modules| and automation frameworksProvide leadership in cloud transformation and migration initiativesEnsure compliance with regulatory| security| and enterprise standardsMentor engineers and establish technical governance processes and adhere to company policy
Essential Skills: Define the target reference architecture for greenfield AKS clusters along with engineering team and ensure how bluefield cluster remain undisruptive: control plane choices| private clusters| node pool strategy| upgrade/runway| and regional topology. Lead design for NGINX Azure Managed Gateway API: HTTPRoute/Gateway modeling| TLS/WAF strategy| policy attachments| and weighted/canary traffic for cutover. Architect kubenet Azure CNI (Cilium) migration with new clusters with Engineering team: IP planning| subnet sizing| pod density| surge capacity| cordon/drain and service-by-service move plan.Choose/validate dataplane features: Cilium network policy| kube proxy replacement (if enabled)| Hubble visibility| and implications on performance/SNAT. Standardize identity/secrets: Azure - Key Vault + CSI; cert lifecycle (Key Vault and/or Gateway API).Establish platform guardrails: Azure Policy| RBAC least privilege| multi tenancy boundaries (namespace/project isolation). Define/Follow the GitHub standards: reusable workflows| CODEOWNERS| branch protections| environment approvals| and artifact provenance/signing. Own non functional requirements: SLOs| HA/DR| capacity modeling| performance budgets| and failover patterns for ingress and data plane. Govern delivery: roadmap| cutover criteria| readiness gates; mentor Platform/DevOps on architectural compliance.
Desirable Skills: Cloud Architect
Keyword: ~Cloud Architect~
Skills: Digital : DevOps
Experience Required: 8-10