Cloud Architect – Azure & Kubernetes

About the role

We are looking for an experienced Cloud Architect to design and deliver a Unified Automation Platform that standardises new‑project delivery and provides self‑service capabilities across hybrid Azure and on‑premises VMware environments.

Key responsibilities

• Architect Azure infrastructure as code using Terraform/OpenTofu for services such as App Services, Container Apps, Function Apps, Azure SQL, Cosmos DB, PostgreSQL and Azure VMware Solution.
• Define Azure identity architecture (Entra ID, Active Directory, GPO, M365 groups, SPNs, managed identities) and ensure secret management via OpenBao/Key Vault.
• Design and implement Azure Kubernetes Service (AKS) clusters, node pools, add‑on stack, and operational dashboards.
• Collaborate with Network Architect on VNets, Application Gateway, WAF, Azure Firewall, NSGs, DNS, ExpressRoute and NetBox IPAM integration.
• Establish Image Factory for golden VM and container images, including CIS hardening and Shared Image Gallery publishing.
• Set up IaC engine standards, module registry, testing framework, drift detection and policy hooks.
• Partner with Backstage and Integration Architects to expose provisioning templates and integrate observability, ITSM/CMDB and security controls.
• Provide architectural governance, validate production deployments and own module lifecycle.

Required profile

• 10+ years of Azure solution and enterprise architecture experience, preferably with Microsoft partner‑level engagements or equivalent certifications.
• Deep expertise in Terraform/OpenTofu for Azure automation, including state management and CI/CD pipelines (Azure DevOps).
• Strong knowledge of Azure networking constructs and hybrid connectivity.

Required skills

• Microsoft Azure (App Services, Container Apps, Functions, SQL, Cosmos DB, PostgreSQL, VMware Solution)
• Terraform / OpenTofu
• Azure DevOps CI/CD pipelines
• Azure Kubernetes Service (AKS)
• Entra ID, Active Directory, Group Policy Objects, M365 groups, Service Principals, Managed Identities
• OpenBao, Azure Key Vault
• Azure networking (VNets, Application Gateway, WAF, Azure Firewall, NSGs, DNS, ExpressRoute)
• NetBox IPAM
• Image Factory, Shared Image Gallery, CIS hardening
• Infrastructure as Code standards, module registry, testing, drift detection
• Backstage platform integration