Azure Cloud Infrastructure Architect

Luxoft; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Luxoft in Mumbai seeks an experienced Senior Azure Cloud Infrastructure Engineer/Architect to design secure, scalable Azure architectures and automate infrastructure using Terraform and IaC. You will manage AKS clusters, implement GitOps via ArgoCD, and ensure secure networking and governance across teams.

The role requires strong coordination, stakeholder management, and hands-on leadership across infrastructure, networking, security and DevOps teams.

Qualifications

• IaC & Automation with Terraform, PowerShell, Bash, Python.
• Azure Security, Identity & Access Management, Governance & Compliance.
• Azure Networking, Hybrid Connectivity & Enterprise Cloud Architecture.
• Strong coordination, stakeholder management & cross-team collaboration.
• Excellent communication, technical leadership & documentation skills.
• Ownership, risk & dependency management; drive architecture decisions.

Responsibilities

• Design secure, scalable Azure cloud architectures.
• Automate Azure infra using Terraform & IaC.
• Design/manage Azure networking (VNets, Subnets, NSGs, DNS, Load Balancers).
• Manage AKS clusters: node pools, RBAC, storage, upgrades & monitoring.
• Deploy containerized apps on AKS with ArgoCD & GitOps.
• Develop Kubernetes manifests and Helm deployments.
• Design CI/CD pipelines for infra & app deployments.
• Apply Azure & Kubernetes security best practices (RBAC, Key Vault, least privilege).
• Implement monitoring, logging, alerts, and operational controls.

Skills

Azure Cloud Architecture

Terraform IaC

AKS Management

Security Best Practices

RBAC & Identity

Stakeholder Management

ArgoCD & GitOps

Tools

Terraform

ArgoCD

Kubernetes

PowerShell

Job description

We are looking for an experienced Senior Azure Cloud Infrastructure Engineer / Architect with strong hands-on expertise in azure cloud infrastructure, networking, terraform automation, AKS, security, and application deployment using ArgoCD.

The candidate should have strong architectural capabilities along with excellent coordination and stakeholder management skills, and should be comfortable working across infrastructure, networking, security, application, and DevOps teams.

Responsibilities:

• Design and implement secure, scalable, highly available Azure cloud architectures.
• Build and automate Azure infrastructure using Terraform and Infrastructure as Code (IaC).
• Design and manage Azure networking, including VNets, Subnets, NSGs, Routing, Private Endpoints, DNS, Load Balancers, Application Gateway, and secure connectivity.
• Manage AKS clusters, including node pools, networking, RBAC, storage, scaling, upgrades, monitoring, and troubleshooting.
• Deploy and manage containerized applications on AKS using ArgoCD and GitOps practices.
• Develop and maintain Kubernetes manifests and Helm-based application deployments.
• Design and support CI/CD pipelines for infrastructure and application deployments.
• Implement Azure and Kubernetes security best practices, including RBAC, Managed Identities, Key Vault, network security, secrets management, and least-privilege access.
• Implement monitoring, logging, alerting, and operational controls for Azure infrastructure and AKS.
• Troubleshoot complex infrastructure, networking, AKS, ArgoCD, and application deployment issues.
• Coordinate with infrastructure, networking, security, architecture, application, and DevOps teams for environment readiness and production deployments.
• Proactively manage dependencies, risks, blockers, and technical issues across multiple teams.
• Drive technical discussions, architecture reviews, deployment planning, and stakeholder communication.

Mandatory Skills Description:

• IaC & Automation: Terraform, PowerShell, Bash, Python
• Strong expertise in Azure Security, Identity & Access Management, Governance, and Compliance frameworks
• Strong experience in Azure Networking, Hybrid Connectivity, and Enterprise Cloud Architecture
• Strong coordination, stakeholder management, and cross-team collaboration
• Excellent communication, technical leadership, and documentation skills
• Strong ownership, problem-solving, risk and dependency management
• Ability to drive architecture discussions and technical decision-making
• Experience working in enterprise-scale environments and cloud transformation initiatives

Nice-to-Have Skills Description:

• Azure Landing Zone design and multi-region architecture
• Private AKS, Azure Firewall, Application Gateway/WAF, and advanced Azure networking
• FinOps, Cost Optimization, Disaster Recovery & Business Continuity Planning
• Service Mesh technologies (Istio/Linkerd)
• Azure Policy, Defender for Cloud, and Zero Trust implementation experience
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
• HashiCorp Terraform Associate
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)