Devsecops-azure Infrastructure Architect

**Job Role: Devsecops-Azure Infrastructure Architect**

**About Company: A leading Business Process Management [BPM] company**

We are seeking a highly skilled and experienced Senior/Principal Azure Engineer to join our team. In this role, you will wear multiple hats and be responsible for the architecture, implementation, and support of our vast Azure infrastructure. You will play a critical role in our company's cloud adoption and governance strategies, ensuring alignment with the Cloud Adoption and Well-Architected Framework concepts.

**Key Responsibilities**:

- **Architect and Implement Azure Solutions**:

- Design and deploy scalable, reliable, and secure Azure solutions.
- Manage hybrid cloud environments with global on-premise locations.
- Ensure adherence to Azure's best practices and Well-Architected Framework.
- **Multi-Tenant Environment Management**:

- Architect and manage Azure solutions across multiple tenants.
- Ensure security and compliance in a multi-tenant setup.
- **Cloud Governance**:

- Implement and manage Azure Policies and Governance at scale.
- Govern Azure RBAC (Role-Based Access Control) at scale.
- Utilize Azure Advisor for triaging and remediating recommendations.
- **Infrastructure as Code (IaC)**:

- Deploy Azure infrastructure using IaC patterns, preferably with Terraform.
- Maintain and manage Azure DevOps and GitHub for CI/CD pipelines.
- **Azure Services and Networking**:

- Support and optimize a wide variety of Azure services, including App Service, Azure Functions, Azure SQL DB, Cosmos DB, and Front Door.
- Manage hybrid networking solutions integrating on-premise and cloud resources.
- Utilize Azure Monitor and related technologies for monitoring and alerts.
- Understand and implement WAF, CDN, Firewalls, and Load Balancers.
- **Data Technologies**:

- Work with SQL Server, Cosmos DB, and other data technologies.
- **Cost Management**:

- Implement best practices around Azure Cost Management, including reservations and compute savings plans.
- **Identity and Access Management**:

- Utilize Entra ID (formerly Azure AD), manage identities, and group management best practices.
- Implement managed identities for secure and streamlined access.
- **Business Continuity, High Availability, and Disaster Recovery (BCDR/HA/DR)**:

- Design and implement BCDR strategies for Azure environments.
- Ensure high availability and disaster recovery plans are in place and tested.
- **Emergency Response and Support**:

- Provide support during emergency situations, including incident response and troubleshooting.
- Assist in fighting fires and resolving critical infrastructure issues.
- **Professional Collaboration**:

- Work professionally and courteously with a variety of personality types.
- Collaborate with development teams, understanding their needs and challenges.

**Qualifications**:

- Extensive experience in architecting and implementing large-scale Azure solutions.
- Strong knowledge of Azure Policy, Management Groups, and Subscription management.
- Proven experience with Terraform and other IaC tools.
- Proficiency with Azure DevOps, GitHub, and CI/CD pipelines.
- In-depth understanding of SQL Server, Cosmos DB, and other Azure data technologies.
- Expertise in Entra ID, managed identities, and group management.
- Familiarity with Azure Cost Management, reservations, and compute savings plans.
- Strong background in Azure networking and hybrid networking solutions.
- Experience with Azure Monitor and related monitoring tools.
- Ability to quickly learn new technologies and fill knowledge gaps.
- Self-motivated with excellent problem-solving skills.
- Previous development experience is a plus.
- Excellent communication and interpersonal skills.

**Nice to Have**:

- Experience with Kubernetes and Azure Kubernetes Service (AKS) as an operator.
- Previous development experience to better understand and support development teams.
- Knowledge of additional DevOps tools and methodologies.
- Experience with containerization technologies such as Docker.
- Experience in architecting and implementing Azure Landing Zones.
- Familiarity with DevSecOps practices.
- Experience with Git and interacting with APIs using tools such as Postman.
- Experience with Azure API Management (APIM).
- Familiarity with Azure Front Door, Azure App Gateway, or similar technologies.
- Understanding of WAF, CDN, Firewalls, and Load Balancers.

**Location : Mumbai and Hyderabad