Cloud Infrastructure Technical Lead

Avanade Inc.; Bengaluru; Hybrid; INR 3,500,000 - 6,000,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Avanade India is seeking an Azure Senior Technical Lead to design and implement enterprise Azure landing zones using Terraform, oversee workload migrations and mentor a small engineering team. Hybrid work in Bengaluru/Gurugram, India, with strong emphasis on governance, security and cloud platform excellence.

The role requires deep hands‑on Azure expertise, Terraform proficiency, and proven leadership to deliver scalable, production‑grade infrastructure and drive pre‑sales collaboration when

Qualifications

• 10–12 years in cloud infrastructure, with Azure focus.
• Hands‑on experience designing enterprise landing zones.
• Proven ability to lead small engineering teams.

Responsibilities

• Design enterprise Azure landing zones aligned to CAF and Well‑Architected.
• Provision Azure services with Terraform; maintain modules and state.
• Lead a 2–4 person team through landing zone build and migration.
• Oversee workload migrations to Azure including go/no‑go decisions.
• Define platform governance, security baselines and monitoring.
• Own DevOps setup for pipelines and drift detection.

Skills

Azure Landing Zones

Terraform

Azure DevOps

Leadership

Hybrid Cloud

Security & Governance

Networking & VPN

Scripting (PowerShell/Python)

Migration Expertise

Tools

Terraform Modules

Job description

Azure Senior Technical Lead — Landing Zone, Terraform & MigrationPracticeCloud & Infrastructure, Avanade IndiaLocationBengaluru/Gurugram, India (Hybrid)Experience10-12 years overall in cloud infrastructure and platform engineering, with deep hands‑on experience designing and provisioning Azure services through Terraform, building enterprise landing zones from scratch, delivering workload migrations, and leading a small engineering team

Key Responsibilities

• Design enterprise Azure landing zones from the ground up, aligned to the Microsoft Cloud Adoption Framework and Well-Architected Framework - management group hierarchy, subscription and environment strategy, networking, identity, security, governance and operations.
• Design and provision Azure services hands‑on using Terraform - authoring, structuring and maintaining modules, root configurations, remote state and provider configuration to a production standard.
• Lead a team of two to four engineers through the landing zone build - allocating work, reviewing code and designs, unblocking the team and owning the quality of what is delivered.
• Lead workload migration to Azure - discovery and assessment, wave planning, migration design (rehost, replatform, refactor), execution, cutover, rollback and post‑migration optimisation.
• Design and configure core platform services: hub‑and‑spoke or Virtual WAN networking, hybrid connectivity (ExpressRoute/VPN), private DNS, Azure Firewall, routing, private endpoints, compute, storage and backup.
• Design identity and access for the platform - Entra ID integration, RBAC model, managed and workload identities, and privileged access.
• Define and implement platform governance - Azure Policy, initiatives and guardrails, management group structure, subscription vending, naming and tagging standards, and cost management.
• Establish security and operations baselines: Defender for Cloud, Key Vault and secrets management, backup and DR patterns, monitoring and alerting, and Azure Monitor/Log Analytics design.
• Own the DevOps set‑up required to deliver the landing zone - repository and branching strategy, CI/CD pipelines for Terraform in Azure DevOps or GitHub Actions, plan/apply gating, approvals, secrets handling and drift detection.
• Set and enforce engineering standards - module design and versioning, repo structure, code review discipline, validation and security scanning (tflint, Checkov/tfsec or equivalent).
• Act as design authority on the engagement - chairing design reviews, resolving architecture escalations, reviewing the client architect’s design and pushing back where it is incomplete.
• Carry knowledge transfer to the client’s own team, and mentor and uplift Avanade engineers on the platform.
• Support presales and pursuits as the platform SME: solution architecture, effort estimation, migration approach, delivery plans and client-facing technical workshops.
• Contribute reusable Terraform modules, reference architectures and accelerators to the practice IP library.

Required Skills & Experience

• 10-12 years of overall experience in cloud infrastructure, platform engineering or infrastructure architecture, with a substantial recent focus on Microsoft Azure.
• Proven experience designing and building enterprise Azure landing zones end‑to‑end - designing the platform, not just consuming one someone else built.
• Deep hands‑on expertise with Terraform - writing and structuring reusable modules, managing state at scale, handling providers and dependencies, and running Terraform in automated pipelines.
• Strong breadth across Azure configuration and operations: compute, networking, storage, databases, backup, monitoring, and the platform services that migrated workloads depend on.
• Strong Azure networking depth: hub‑and‑spoke and Virtual WAN topologies, ExpressRoute and VPN, NSGs/UDRs, Azure Firewall, Private Link and Private Endpoints, DNS design.
• Solid grounding in Azure identity, security and governance: Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and enterprise compliance requirements.
• Proven delivery of workload migrations to Azure at enterprise scale - assessment, wave planning, execution and cutover - from on‑premises datacentres or other cloud providers.
• Hands‑on DevOps capability for infrastructure delivery - Azure DevOps Pipelines or GitHub Actions, Git workflows, code review discipline and pipeline‑driven deployment.
• Scripting capability in PowerShell and/or Python for automation, tooling and operational tasks.
• Demonstrated experience leading a small engineering team - allocating work, reviewing code and designs, and holding technical quality on medium‑to‑large engagements.
• Strong client‑facing communication skills, including the ability to defend architecture decisions with senior client stakeholders and architecture review boards.

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

Avanade is committed to providing veteran employment opportunities to our service men and women.

Please read Avanade's Hiring and Privacy Statement for more information on how we process your data during the Recruiting and Hiring process.