Cloud Strategy & Operations Head

Zybisys Consulting Services; Bengaluru; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Zybisys Consulting Services is seeking a senior Cloud Strategy & Operations Head to own the architecture, build, automation, and operations of a complex multi‑region Azure cloud environment, integrated with on‑premises data centers in a hybrid setup. You will lead from the front, designing infrastructure, deployment automation, and governance for managed services.

The role partners with clients as the primary technical owner, driving observability, cost governance, and resilient delivery across

Qualifications

• 9–14 years of IT/Infrastructure experience with at least 6 years in Azure cloud infrastructure or managed cloud roles.
• Strong expertise in Microsoft Azure, Hybrid Cloud, Azure Networking, Azure AD, ADFS, Azure Arc, ExpressRoute, Site‑to‑Site VPN, Windows Server, Linux, Palo Alto, Zscaler, CyberArk PAM, Trend Micro, Prometheus, Grafana, Azure Monitor, Log Analytics, KQL, Terraform, Ansible, PowerShell, Python, Azure DevOps, CI/CD, FinOps, Azure Cost Management, and ITSM platforms.

Responsibilities

• Architect and lead the build of multi‑region Azure cloud infrastructure integrated with on‑premises datacenter environments in a hybrid topology.
• Design end‑to‑end infrastructure: compute, storage, networking, identity, and connectivity layers for business and employee workloads.
• Lead capacity planning, infrastructure right‑sizing, and ongoing resource optimisation across cloud and on‑premises layers.
• Design and manage hub‑and‑spoke or Virtual WAN topologies spanning multi‑region Azure and hybrid datacenter connectivity.
• Deploy and manage firewall solutions, WAF, Application Gateways, Load Balancers, and Front Door for traffic management.
• Implement and govern Azure API Gateway and API Management; deploy ZIA and ZPA for secure connectivity.
• Configure and manage Palo Alto NGFW, Trend Micro EDR, and CyberArk PAM as per client infosec policy directives.
• Design and implement a comprehensive observability strategy; deploy Prometheus and Grafana stacks; configure Azure Monitor and Log Analytics.
• Champion automation with IaC, CI/CD readiness, and runbooks; build PowerShell/Python scripts to reduce toil.
• Own cloud cost governance across all managed Azure subscriptions; implement FinOps, tagging policies, and budget alerts.

Skills

Azure Cloud Infra

Hybrid Cloud

Azure Networking

Azure AD/ADFS

IaC (Terraform/Ansible)

CI/CD / DevOps

Scripting (PowerShell/Python)

FinOps / Cost Mgmt

Tools

Azure DevOps

Terraform

Ansible

PowerShell

Python

Grafana/Prometheus

Job description

About Role

The Cloud Strategy & Operations Head is a senior hands‑on technical leadership role within the Zybisys Managed Cloud Services practice. The role owns the architecture, build, automation, and ongoing operations of a complex multi‑region Azure cloud environment integrated with an on‑premises datacenter in a hybrid model serving both business‑critical application workloads and enterprise employee services.

This is not a purely governance or managerial position. The ideal candidate is an experienced cloud architect and MSSP practitioner who leads from the front capable of designing infrastructure, building automation pipelines, deploying and managing enterprise platforms, defining observability strategy, and governing managed services delivery — while engaging directly with the client as Zybisys's primary technical owner.

Key Responsibilities

Platform Architecture & Build

• Architect and lead the build of multi‑region Azure cloud infrastructure integrated with on‑premises datacenter environments in a hybrid topology.
• Design end‑to‑end infrastructure: compute, storage, networking, identity (Azure AD, ADFS, hybrid directory), and connectivity layers for both business and employee workloads.
• Define platform standards, configuration baselines, and architecture blueprints; own Azure build planning and environment design from inception through steady‑state operations.
• Plan and oversee Azure landing zone design, subscription governance, management groups, and policy frameworks aligned with enterprise requirements.
• Lead capacity planning, infrastructure right‑sizing, and ongoing resource optimisation across cloud and on‑premises layers.

Networking, Security & Traffic Management

• Design and manage hub‑and‑spoke or Virtual WAN network topologies spanning multi‑region Azure and hybrid datacenter connectivity (ExpressRoute, Site‑to‑Site VPN).
• Deploy and manage Azure‑native and marketplace‑based firewall solutions, Web Application Firewalls (WAF), Application Gateways, Azure Load Balancers, and Azure Front Door for traffic management and application delivery.
• Implement and govern Azure API Gateway and API Management for application exposure and traffic control.
• Deploy and manage Zscaler Internet Access (ZIA) for clean, filtered internet egress and Zscaler Private Access (ZPA) for secure internal application connectivity.
• Configure and manage Palo Alto NGFW, Trend Micro EDR, and CyberArk PAM — implementing security baselines and change configurations per client infosec policy directives.

Observability, Monitoring & APM

• Design and implement a comprehensive observability strategy covering infrastructure, application, network, and security telemetry layers across all managed environments.
• Deploy and manage Prometheus and Grafana stacks for real‑time metrics collection, dashboard visualization, and alerting across cloud and hybrid environments.
• Implement sFlow and NetFlow monitoring for network traffic analysis, bandwidth utilization, and anomaly detection across datacenter and Azure network paths.
• Evaluate, recommend, and deploy Application Performance Monitoring (APM) solutions; integrate APM data into the unified observability framework for application‑layer visibility.
• Configure Azure Monitor, Log Analytics, and custom KQL alert rules; establish noise‑reduced alerting, correlation rules, and escalation matrices.
• Define and maintain runbooks, SOPs, and incident playbooks for all priority categories; own SLA adherence and drive RCA discipline for major incidents.

Automation, DevOps & CI/CD Readiness

• Champion an automation‑first operations culture — auto‑remediation workflows, self‑healing runbooks, scheduled maintenance automation, and event‑driven provisioning.
• Implement IaC practices using Terraform, Ansible, ARM templates, or Bicep for all infrastructure provisioning and configuration management workflows.
• Lead CI/CD readiness assessments and pipeline design for managed cloud environments; collaborate with DevOps teams on deployment automation, release governance, and environment promotion.
• Build and maintain operational automation scripts (PowerShell, Python, Bash) that reduce manual toil, improve MTTR, and increase consistency across operations.

Cloud Cost Optimisation

• Own cloud cost governance across all managed Azure subscriptions — define tagging policies, cost allocation frameworks, and budget alert structures.
• Continuously analyse Azure spend using Cost Management + Billing; identify rightsizing opportunities, reserved instance recommendations, and idle resource elimination.
• Produce regular cost optimisation reports and present savings roadmaps to stakeholders; track and report realised savings against targets.
• Implement FinOps practices aligned with team maturity — chargeback models, showback dashboards, and workload‑level cost accountability.

MSSP Service Delivery & Governance

• Own end‑to‑end managed services delivery including incident, change, problem, and service request management via ITSM platforms.
• Govern SLA adherence across all priority tiers; lead post‑incident reviews, chronic issue elimination, and continuous improvement programs.
• Serve as Zybisys's primary technical owner and escalation authority in the client relationship — covering both technical and executive‑level stakeholder engagement.
• Publish monthly service review reports, SLA dashboards, capacity reports, and quarterly business reviews; drive CAB participation and change governance.

Team Leadership & Development

• Lead, mentor, and performance‑manage the managed cloud operations team across L1, L2, specialist, and DevOps engineering functions.
• Design 24x7 shift structures, escalation paths, and on‑call frameworks ensuring operational coverage and resilience.
• Conduct skills gap assessments, define technical training roadmaps, and build team capability aligned to platform evolution.
• Foster a team culture of ownership, documentation discipline, and continuous improvement.

Required Skills & Experience

• 9–14 years of overall IT/Infrastructure experience with at least 6 years in Azure cloud infrastructure or managed cloud roles.
• Strong expertise in Microsoft Azure, Hybrid Cloud, Azure Networking, Azure AD, ADFS, Azure Arc, ExpressRoute, Site‑to‑Site VPN, Windows Server, Linux, Palo Alto, Zscaler, CyberArk PAM, Trend Micro, Prometheus, Grafana, Azure Monitor, Log Analytics, KQL, Terraform, Ansible, PowerShell, Python, Azure DevOps, CI/CD, FinOps, Azure Cost Management, and ITSM platforms.

Preferred Certifications

• AZ‑104, AZ‑305, AZ‑500
• Palo Alto PCNSE
• Zscaler ZCCA/ZCCP
• CyberArk Defender
• HashiCorp Terraform Associate
• AZ‑400 (Azure DevOps Engineer)
• Grafana Certified Associate
• Dynatrace/AppDynamics Certification
• ITIL v4 Foundation or above