Azure Cloud Architect

Capgemini; Bengaluru; On-site; INR 4,000,000 - 7,500,000; Full time

Job summary

Capgemini Bengaluru seeks a Senior Cloud Architect to join our Product Engineering team. You will define secure cloud architecture patterns on Microsoft Azure, focusing on governance, compliance, and enterprise-grade design for our Azure-based solution portfolio.

The role requires deep expertise in Azure PaaS, container services, networking, and cloud security, with a strong emphasis on security, scalability, and leadership across engineering teams.

Qualifications

• 8+ years of overall IT experience.
• 5+ years of hands-on Azure architecture and Kubernetes experience.
• Kubernetes CKА certification is a plus (CKA).
• Strong expertise in Azure networking (VNet, NSG, Private Link, DNS, WAF).
• AKS architecture and Kubernetes ecosystem knowledge.
• PaaS security hardening and cloud security/compliance understanding.
• Identity & Access Management with Azure AD/Entra ID/OAuth2.
• Strong security and governance practices for cloud platforms.

Responsibilities

• Define secure, scalable cloud architecture patterns for the product platform.
• Design reference architectures and platform blueprints.
• Establish best practices across Azure services and security controls.
• Architect secure network topologies and zero-trust ingress/egress.
• Mentor engineers and guide cross-functional teams on platform maturity.

Skills

Azure architecture

Kubernetes

AKS architecture

Cloud security

IAM

Networking

Zero Trust

Terraform

Bicep

ARM

Tools

Terraform

Bicep

ARM

Job description

We are seeking an experienced Senior Cloud Architect to join our Product Engineering team. The

team builds and enhances a customized enterprise platform on top of Microsoft Azure , with a

strong focus on security, governance, compliance, and enterprise -grade architecture.

This is a strategic product role responsible for defining secure cloud architecture patterns and

strengthening our Azure -based service portfolio. The role requires deep expertise in Azure PaaS,

container services, networking, and cloud security.

Product Portfolio

Our platform provides customized and governed offerings built on :

Must Haves:

• Azure App Service (Web Apps)
• Azure Functions
• Azure Kubernetes Service (AKS)
• Azure Container Apps
• Azure Front Door
• Azure Application Gateway
• ENVOY Gateway API Ingress
• Certificate and secrets management solutions
• Design, develop, and validate comprehensive solution architectures for services,

conducting end -to-end testing and Proof of Concept (POC) initiatives to confirm

functionality, performance, and integrity

• Troubleshoot ing these services for any customer issues (related to infrastructure)

Good to Haves:

• Git Hub CI/CD
• Good to have Kubernetes certification (CKA)
• Basic PowerShell knowledge to write scripts for the infrastructure automation
• Azure DNS
• IAM workflow (Authentication and Authorization)

Our goal is to embed security, compliance, network isolation, and governance controls into all

platform offerings.

Key Responsibilities

Architecture & Design

• Define secure, scalable, and reusable cloud architecture patterns.
• Design reference architectures and platform blueprints.
• Establish best practices across Azure services.

Security & Governance

• Architect secure network topologies (Private Endpoints, WAF, VNet integration).
• Implement Zero -Trust and secure ingress/egress patterns.
• Embed compliance guardrails and policy enforcement mechanisms.

Product Enhancement

• Identify capability gaps and drive enhancements in the product portfolio.
• Standardize cloud patterns across services.
• Contribute to product roadmap discussions.

Technical Leadership

• Provide architectural guidance to engineering teams.
• Review infrastructure and platform designs.
• Mentor engineers and elevate platform maturity.

Automation & DevOps

• Good to have Infrastructure -as-Code adoption (Terraform/Bicep/ARM).
• Knowledge of CI/CD best practices for platform services.
• Improve reliability, scalability, and operational excellence.

Required Qualifications

• 8+ years of overall IT experience
• 5+ years of hands -on Azure architecture and Kubernetes experience
• Good to have Kubernetes certification (CKA)
• Strong expertise in:
• Azure networking (VNet, NSG, Private Link, DNS, WAF)
• AKS architecture and Kubernetes ecosystem
• PaaS security hardening
• Identity & Access Management (Azure AD / Entra ID / Outh2 )
• Strong understanding of cloud security and compliance frameworks

Key Competencie s

• Strong architectural and systems thinking
• Product mindset with security -first approach
• Ability to influence cross -functional stakeholders
• Strong communication and documentation skills
• Proactive problem -solving abilit