Infrastructure Architect (Cloud & Platform)

Xoriant; Hyderabad, Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Xoriant is seeking an experienced Azure architect to design, implement, and secure scalable cloud infrastructure on Azure, with a strong emphasis on AKS, landing zones, and secure networking.

You will own AKS platforms, implement zero trust, automation, and governance using Terraform/Bicep, Azure DevOps, and GitOps. Join Hyderabad team to drive operational excellence.

Qualifications

• Experience architecting and securing large Azure deployments.
• Proficiency with AKS, Azure Networking, and security controls.
• Experience with IaC using Terraform or Bicep.
• Hands-on with Azure DevOps or GitHub CI/CD pipelines.
• Strong understanding of Zero Trust concepts.

Responsibilities

• Design, implement, and secure scalable Azure cloud infrastructure with AKS.
• Design and manage Azure Landing Zones and Hub-Spoke networking.
• Own AKS platforms including cluster design, ingress, and DR.
• Implement Zero Trust security, RBAC, and Defender for Containers.
• Develop IaC with Terraform/Bicep and automate via Azure DevOps/GitHub.
• Implement GitOps with Flux/ArgoCD and monitor/log.
• Drive cloud governance, compliance, FinOps, and operational excellence.

Skills

Azure Architecture

AKS

Azure Landing Zone

Hub-Spoke networking

Terraform

Bicep

Azure DevOps

GitHub CI/CD

Entra ID

RBAC

PIM

Azure Firewall

Defender for Cloud

Microsoft Sentinel

Azure Monitor

Log Analytics

GitOps

Flux

ArgoCD

Tools

Azure DevOps

GitHub Actions

Kubernetes

ACR

ExpressRoute

Private Endpoints

CNI

PSA

Network Policies

Job description

Role & responsibilities

Design, implement, and secure scalable Azure cloud infrastructure with a strong focus on AKS (Azure Kubernetes Service), cloud security, automation, governance, and operational excellence.

Key Responsibilities

• Design and manage Azure Landing Zones, Hub-Spoke networking, ExpressRoute/VPN, and Private Endpoints.
• Own and architect AKS platforms, including cluster design, Azure CNI networking, ingress, autoscaling, ACR, and disaster recovery.
• Implement Zero Trust security, RBAC, PIM, Entra ID, Azure Firewall, and network security controls.
• Secure AKS environments using PSA, Network Policies, Workload Identity, Container Scanning, and Defender for Containers.
• Develop Infrastructure as Code using Terraform/Bicep and automate deployments through Azure DevOps/GitHub CI/CD.
• Implement GitOps (Flux/ArgoCD), monitoring, logging, and policy-as-code.
• Drive cloud governance, compliance, BCDR, FinOps, and operational excellence.

Mandatory Skills

• Microsoft Azure Architecture
• Azure Landing Zone & Hub-Spoke Design
• AKS (Azure Kubernetes Service)
• Azure CNI / Kubernetes Networking
• Terraform or Bicep
• Azure DevOps / GitHub CI/CD
• Entra ID, RBAC, PIM
• Azure Firewall, WAF, NSG
• Defender for Cloud & Microsoft Sentinel
• Azure Monitor & Log Analytics
• GitOps (Flux/ArgoCD)

Mandatory AKS Security Skills

• Pod Security Admission (PSA)
• Network Policies
• Workload Identity
• Secrets Management