Azure Cloud Architect

About the role

A hands-on Cloud Architect to lead the Cloud Migration architecture, design, implementation, and governance of enterprise-scale Azure and AWS environments. The candidate should combine deep technical expertise in DevSecOps automation to host applications and data on the Azure cloud, aligning with enterprise standards.

Responsibilities

• Design and implement Infrastructure as Code (IaC) using Hashicorp Terraform Enterprise, ARM templates, and GitHub action pipelines for enterprise customers.
• Hands-on experience in Design, build, and manage DevSecOps pipelines with Harness and GitHub Actions.
• Design and implement solutions to host applications using services like AKS, ACA, ECS, EC2, Azure VM app services & function apps on ASP/ASE, SWA, CDNs.
• Implement Zero-Trust, defense in depth architectures using Azure RBAC, Entra IDs, experience working with MFA, – MIs, App registrations, etc.
• Strong understanding of implementing encryption for data at rest and in transit, experience implementing mTLS, etc.
• Working with security testing like DAST, PEN test, Exposure to Black Duck vulnerability scanning integration
• Strong understanding of networking covering segmentation, routing, filtering, etc., DNS, Firewalls, Proxies, use of appliances, etc.
• Experience in integrating with enterprise certificate management and key management services Hashicorp Vault
• Experience designing highly resilient architectures, with cross-region disaster recovery capabilities at service and platform levels, meeting strict RTO/RPO targets.
• Experience designing and implementing cross-region active-active solutions, spanning public cloud and on-premises.

Requirements

• Experience in both Azure and AWS migrations is preferred.

Qualifications

• Bachelor of Computer Science

Skills

• Technical Expertise in DevSecOps Automation
• Infrastructure as Code (IaC) using Hashicorp Terraform Enterprise, ARM templates, and GitHub action pipelines
• DevSecOps Pipelines with Harness and GitHub Actions
• Hosting Applications using Services like AKS, ACA, ECS, EC2, Azure VM app services & function apps on ASP/ASE, SWA, CDNs
• Zero-Trust, Defense in Depth Architectures using Azure RBAC, Entra IDs, MFA, App registrations, etc.
• Encryption for Data at Rest and in Transit, mTLS, etc.
• Security Testing like DAST, PEN test, Black Duck vulnerability scanning integration
• Networking covering Segmentation, Routing, Filtering, DNS, Firewalls, Proxies, use of Appliances, etc.
• Enterprise Certificate Management and Key Management Services Hashicorp Vault
• Designing Highly Resilient Architectures, Cross-Region Disaster Recovery Capabilities, Cross-Region Active-Active Solutions

Benefits

TCS Employee Benefits Summary: Discretionary Annual Incentive. Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans. Family Support: Maternal & Parental Leaves. Insurance Options: Auto & Home Insurance, Identity Theft Protection. Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement. Time Off: Vacation, Time Off, Sick Leave & Holidays. Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing. Salary Range: $100,000 - $130,000 a year