Cloud Strategy & Operations Head

Zybisys; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Zybisys Consulting Services LLP in Bengaluru is seeking a Cloud Strategy & Operations Head to own the architecture, build, automation, and ongoing operations of a complex Azure cloud environment with hybrid on-prem integration. The role requires hands-on leadership to design infrastructure, deploy automation pipelines, and govern managed services while engaging directly with clients as the technical owner.

The ideal candidate will drive platform standards, Azure governance, cost management, and

Qualifications

• Extensive experience designing and operating multi-region Azure environments.
• Hands-on leadership in MSSP delivery and cloud operations.
• Strong background in hybrid cloud architectures including on-prem integration.

Responsibilities

• Architect multi-region Azure infra in a hybrid topology.
• Define platform standards, baselines, and governance for Azure builds.
• Lead Azure landing zones, governance, and cost-optimisation initiatives.
• Oversee security, networking, observability, and incident management across environments.
• Mentor and manage the managed cloud operations team across levels.

Skills

Azure Architecture

MSSP Experience

Hybrid Cloud

Observability

Automation & IaC

Tools

Terraform

Ansible

ARM templates

Bicep

Job description

ZYBISYS CONSULTING SERVICES LLP | Full time

Cloud Strategy & Operations Head

Bangalore North, India | Posted on 07/29/2026

________________________________________________________________________________________

About Zybisys

Zybisys is a technology company that helps banks, financialinstitutions, and FinTech businesses build and run secure, reliable, andhigh-performance technology platforms. We work closely with some of India'sleading stock brokers to manage their cloud infrastructure, cybersecurity,platform operations, and observability. With deep expertise in the CapitalMarkets domain, we focus on simplifying complex technology, improvingoperational resilience, and helping our customers innovate with confidence.

Job Description

The Cloud Strategy & Operations Head is a senior hands-ontechnical leadership role within the Zybisys Managed Cloud Services practice.The role owns the architecture, build, automation, and ongoing operations of acomplex multi-region Azure cloud environment integrated with an on-premisesdatacenter in a hybrid model — serving both business-critical applicationworkloads and enterprise employee services.

This is not a purely governance or managerial position. Theideal candidate is an experienced cloud architect and MSSP practitioner wholeads from the front — capable of designing infrastructure, building automationpipelines, deploying and managing enterprise platforms, defining observabilitystrategy, and governing managed services delivery — while engaging directlywith the client as Zybisys's primary technical owner.

Key Responsibilities

• Architect and lead the build ofmulti-region Azure cloud infrastructure integrated with on-premises datacenterenvironments in a hybrid topology.
• Design end-to-endinfrastructure: compute, storage, networking, identity (Azure AD, ADFS, hybriddirectory), and connectivity layers for both business and employee workloads.
• Define platform standards,configuration baselines, and architecture blueprints; own Azure build planningand environment design from inception through steady-state operations.
• Plan and oversee Azure landingzone design, subscription governance, management groups, and policy frameworksaligned with enterprise requirements.
• Lead capacity planning,infrastructure right-sizing, and ongoing resource optimisation across cloud andon-premises layers.

Networking, Security& Traffic Management

• Design and manage hub-and-spokeor Virtual WAN network topologies spanning multi-region Azure and hybriddatacenter connectivity (ExpressRoute, Site-to-Site VPN).
• Deploy and manage Azure-nativeand marketplace-based firewall solutions, Web Application Firewalls (WAF),Application Gateways, Azure Load Balancers, and Azure Front Door for trafficmanagement and application delivery.
• Implement and govern Azure APIGateway and API Management for application exposure and traffic control.
• Deploy and manage ZscalerInternet Access (ZIA) for clean, filtered internet egress and Zscaler PrivateAccess (ZPA) for secure internal application connectivity.
• Configure and manage Palo AltoNGFW, Trend Micro EDR, and CyberArk PAM — implementing security baselines andchange configurations per client infosec policy directives.

Observability, Monitoring& APM

• Design and implement acomprehensive observability strategy covering infrastructure, application,network, and security telemetry layers across all managed environments.
• Deploy and manage Prometheus andGrafana stacks for real-time metrics collection, dashboard visualization, andalerting across cloud and hybrid environments.
• Implement sFlow and NetFlowmonitoring for network traffic analysis, bandwidth utilization, and anomalydetection across datacenter and Azure network paths.
• Evaluate, recommend, and deployApplication Performance Monitoring (APM) solutions; integrate APM data into theunified observability framework for application-layer visibility.
• Configure Azure Monitor, LogAnalytics, and custom KQL alert rules; establish noise-reduced alerting,correlation rules, and escalation matrices.
• Define and maintain runbooks,SOPs, and incident playbooks for all priority categories; own SLA adherence anddrive RCA discipline for major incidents.

Automation, DevOps &CI/CD Readiness

• Champion an automation-firstoperations culture — auto-remediation workflows, self-healing runbooks,scheduled maintenance automation, and event-driven provisioning.
• Implement IaC practices usingTerraform, Ansible, ARM templates, or Bicep for all infrastructure provisioningand configuration management workflows.
• Lead CI/CD readiness assessmentsand pipeline design for managed cloud environments; collaborate with DevOpsteams on deployment automation, release governance, and environment promotion.
• Build and maintain operationalautomation scripts (PowerShell, Python, Bash) that reduce manual toil, improveMTTR, and increase consistency across operations.
• Own cloud cost governance acrossall managed Azure subscriptions — define tagging policies, cost allocationframeworks, and budget alert structures.
• Continuously analyse Azure spendusing Cost Management + Billing; identify rightsizing opportunities, reservedinstance recommendations, and idle resource elimination.
• Produce regular costoptimisation reports and present savings roadmaps to stakeholders; track andreport realized savings against targets.
• Implement FinOps practicesaligned with team maturity — chargeback models, showback dashboards, andworkload-level cost accountability.

MSSP Service Delivery& Governance

• Own end-to-end managed servicesdelivery including incident, change, problem, and service request managementvia ITSM platforms.
• Govern SLA adherence across allpriority tiers; lead post-incident reviews, chronic issue elimination, andcontinuous improvement programs.
• Serve as Zybisys's primarytechnical owner and escalation authority in the client relationship — coveringboth technical and executive-level stakeholder engagement.
• Publish monthly service reviewreports, SLA dashboards, capacity reports, and quarterly business reviews;drive CAB participation and change governance.
• Lead, mentor, andperformance-manage the managed cloud operations team across L1, L2, specialist,and DevOps engineering functions.
• Design 24x7 shift structures,escalation paths, and on-call frameworks ensuring operational coverage andresilience.
• Conduct skills gap assessments,define technical training roadmaps, and build team capability aligned toplatform evolution.
• Foster a team culture ofownership, documentation discipline, and continuous improvement.

Required Skills & Experience

• 12 – 16 years of overallIT/infrastructure experience; minimum 6 years in cloud infrastructure ormanaged cloud roles.
• Proven experience architectingand operating multi-region Microsoft Azure environments including landing zonedesign, subscription governance, and hybrid connectivity (ExpressRoute,Site-to-Site VPN, Azure Arc).
• Strong hybrid infrastructureexperience — integrating on-premises datacenter environments with Azure throughconsistent networking, identity, and management planes.
• Deep expertise in Windows Serverand Linux (RHEL/Ubuntu) administration, VM lifecycle management, storage(SAN/NAS/Azure-native), and OS-level troubleshooting.
• Enterprise identity anddirectory services: Azure AD, ADFS, hybrid identity, Conditional Access,Privileged Identity Management, and M365 platform administration.
• Strong networking fundamentals:BGP, OSPF, VLANs, VXLAN, DNS, DHCP, NTP, IPSec VPN, SD-WAN, and networksegmentation design.

Networking, SecurityPlatforms & Traffic Management

• Hands-on experience deployingand managing Azure-native and marketplace-based firewalls, Azure WAF,Application Gateway, Azure Load Balancer, Azure Front Door, and TrafficManager.
• Azure API Management and APIGateway configuration — API policies, routing, throttling, security, anddeveloper portal management.
• Zscaler ZIA and ZPA deployment,policy configuration, and operational management for secure internet access andprivate application connectivity.
• Palo Alto NGFW (Panoramapreferred), Trend Micro Apex One / XDR, and CyberArk PAM administration —policy implementation, change management, and compliance tracking under clientsecurity directives.

Observability &Monitoring

• Prometheus and Grafanadeployment and operations — metric scraping, custom dashboards, alerting rules,and integration with cloud and on-premises targets.
• sFlow and NetFlow collection,analysis, and visualization for network traffic monitoring and anomalydetection.
• APM platform experience(Dynatrace, AppDynamics, New Relic, Azure Application Insights, or equivalent)— deployment, agent rollout, baseline tuning, and dashboard design.
• Azure Monitor, Log Analytics,KQL query development, and unified alerting for hybrid environments.
• Experience designingobservability strategies from scratch — defining what to monitor, how to alert,and how to present operational health to stakeholders.

Automation, DevOps &IaC

• Strong scripting and automationskills: PowerShell, Python, Bash; IaC with Terraform and / or Ansible acrosscloud and hybrid environments.
• CI/CD pipeline design andreadiness assessment: Azure DevOps, Git-based workflows, deployment automation,environment promotion strategies.
• Demonstrated track record ofbuilding auto-remediation workflows and runbook automation that measurablyreduced MTTR or eliminated manual toil.
• Azure Cost Management + Billing,reserved instance analysis, rightsizing recommendations, and cost allocationtagging.
• FinOps practices: chargeback /showback models, budget governance, anomaly alerting, and savings tracking.
• Experience delivering costreduction programs with measurable outcomes in managed cloud or MSSPenvironments.

MSSP & ServiceDelivery

• Minimum 4 years in an MSSP ormulti-client managed services environment with full operational ownership (notjust support coordination).
• Proven SLA governance in 24x7operations — escalation management, war-room coordination, and executivecommunication during major incidents.
• ITSM platform experience: ZohoDesk, ServiceNow, Freshservice, or equivalent — process ownership, not justusage.

Certification (Preferred)

Domain Certification

AZ-104 (Administrator)|AZ-305 (Solution Architect)|AZ-500 (Security)

Networking/ Security Automation/ DevOps Observability

Grafana CertifiedAssociate|Dynatrace or AppDynamics certification

ServiceManagement

ITIL v4 Foundation or above

This document is confidential and prepared for internalrecruitment purposes only.|Zybisys Consulting Services LLP|www.zybisys.com