Azure Network & Security Architect

Valuelabs; Hyderabad; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Valuelabs in India is seeking a Senior Azure Cloud Architect with 10+ years of experience to design, build, secure, and operate production-grade Azure environments aligned with CAF and Well-Architected Framework. The role demands hands-on mastery of Terraform and/or Bicep, strong governance, and effective stakeholder communication.

You will implement secure, scalable network topologies (Hub-and-Spoke, ExpressRoute, Private Endpoints), enforce identity controls, and guide cloud transformation

Qualifications

• 10+ years of IT or cloud architecture experience.
• Deep expertise in Azure Networking and Security.
• Experience with CAF, Well-Architected and enterprise-scale Landing Zone architectures.

Responsibilities

• Design and implement enterprise-grade Azure Landing Zones aligned with CAF, Enterprise-Scale Architecture and Zero Trust Security.
• Define and implement management groups, subscription lifecycle, resource standards, naming and tagging, RBAC and governance.
• Architect secure and scalable network topologies (Hub-and-Spoke, Virtual WAN, ExpressRoute, Site-to-Site VPN).
• Design IP addressing strategy and network segmentation.
• Implement network security controls, monitoring, and governance.
• Mentor engineers, participate in design reviews and stakeholder communications.

Skills

Azure networking

Azure security

Landing Zone design

Identity management

Security governance

Terraform

Bicep

Git workflows

CI/CD for infrastructure

Enterprise-scale architecture

Tools

Terraform

Bicep

Git

Job description

Job Title: Azure Network & Security Architect

Experience: 10+ Years

Notice Period: Immediate to 1 Month

Job Description:

We are seeking a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. The candidate will be responsible for designing, building, securing, and operating production-grade Azure environments aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework principles. The role requires hands‑on mastery of Infrastructure as Code (Terraform and/or Bicep), automation, governance, identity, security controls, and scalable network design. The individual will also serve as a technical advisor to stakeholders, lead cloud transformation initiatives, and mentor engineering teams. Strong communication, stakeholder management, documentation, and presentation skills are mandatory.

Responsibilities

• Design and implement enterprise‑grade Azure Landing Zones aligned with:
  • Microsoft Cloud Adoption Framework (CAF)
  • Azure Enterprise‑Scale Architecture
  • Zero Trust Security Model
• Define and implement:
  • Management Groups hierarchy
  • Subscription strategy and lifecycle management
  • Resource organization standards
  • Naming conventions and tagging strategy
  • RBAC and identity governance
  • Policy‑driven governance and compliance
• Architect secure and scalable network topologies:
  • Hub‑and‑Spoke / Virtual WAN architectures
  • ExpressRoute and Site‑to‑Site VPN connectivity
  • Private Endpoints and Private DNS Zones
  • Azure Firewall, NSGs, ASGs, Route Tables
  • Load Balancers, Application Gateway, Front Door
• Design IP addressing strategy and network segmentation.
• Implement network security controls and traffic inspection models.
• Optimize network performance, availability, and resiliency.

Azure Security & Governance

• Implement enterprise security posture using:
  • Microsoft Defender for Cloud
  • Azure Policy and Initiative assignments
  • Azure Blueprints (where applicable)
  • Conditional Access and Identity Protection
  • Privileged Identity Management (PIM)
• Design secure identity architecture using:
  • Entra ID (Azure AD)
  • RBAC models and least‑privilege access
  • Managed Identities
• Ensure compliance with regulatory standards (ISO, SOC2, CIS, NIST – as applicable).
• Establish logging, monitoring, SIEM integration, and audit controls.

Infrastructure as Code & Automation

• Enforce version control, peer reviews, testing, and promotion pipelines.
• Automate provisioning, governance, security baselines, and guardrails.

Operations, Reliability & Cost Management

• Design for:
  • High availability and disaster recovery
  • Backup and recovery
  • Scalability and performance optimization
• Implement observability using:
  • Azure Monitor, Log Analytics, Application Insights
• Enable cost governance:
  • Cost Management + Billing
  • Budgeting and chargeback/showback models
  • Rightsizing and optimization

Stakeholder Engagement & Leadership

• Translate business requirements into technical architecture.
• Produce high‑quality architecture documentation, diagrams, and runbooks.
• Lead technical discussions with customers, auditors, security teams, and delivery teams.
• Mentor junior engineers and promote engineering excellence.
• Participate in design reviews, audits, and governance forums.

Required Skills & Qualifications Technical Skills

• Strong hands‑on expertise with:
  • Microsoft Azure platform (IaaS, PaaS, Networking, Security)
  • Azure Landing Zone design and deployment
  • Enterprise networking architectures
  • Identity and access management
  • Azure security tooling and governance
• Expert‑level proficiency in:
  • Terraform and/or Bicep
  • Git‑based workflows
  • CI/CD pipelines for infrastructure
• Deep knowledge of:
  • TCP/IP, DNS, routing, firewall concepts
  • Hybrid connectivity models
  • Cloud security best practices
  • Infrastructure automation patterns
• Experience working in multi‑subscription, enterprise environments.