Sr Architect

Birlasoft; Coimbatore District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Birlasoft seeks a senior Cloud Architect to lead the design and implementation of enterprise-scale Azure architectures and Landing Zones from Coimbatore, Tamil Nadu. You will define governance strategies, policies, and multi-region Azure environments while enabling strong identity and zero-trust security.

The role requires deep experience with Terraform, Bicep, ARM templates, Azure DevOps, and GitHub Actions, plus Defender for Cloud and Sentinel.

Qualifications

• Azure Landing Zone Architecture expertise with enterprise-scale delivery.
• Strong knowledge of Entra ID and identity governance principles.
• Experience in hybrid cloud, multi-region Azure environments.
• Proficiency in Terraform, Bicep, and ARM templates for IaC.
• Hands-on with Azure DevOps and GitHub Actions for CI/CD.
• Familiarity with security tooling: Defender for Cloud and Sentinel.
• Ability to lead architecture reviews and mentor teams.

Responsibilities

• Lead the design and implementation of enterprise-scale Azure architectures and Landing Zones.
• Define cloud governance, subscription strategy, management groups, policies, RBAC, and resource organization standards.
• Architect Hub-Spoke, Virtual WAN, hybrid cloud, and multi-region Azure environments.
• Design and implement Entra ID solutions including Hybrid Identity, SSO, MFA, Conditional Access, PIM, Identity Governance, Zero Trust.
• Develop cloud security architectures leveraging Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and compliance frameworks.
• Drive IaC with Terraform, Bicep, ARM templates and CI/CD using Azure DevOps and GitHub Actions.
• Design monitoring, observability, disaster recovery, and business continuity solutions.
• Engage with stakeholders, lead architecture reviews, and mentor cloud engineering teams.

Skills

Azure Landing Zone

Microsoft Entra ID

Azure Networking

Azure Security

Azure Governance

Terraform

Bicep

ARM Templates

Azure DevOps

GitHub Actions

Zero Trust

Tools

Terraform

Bicep

ARM Templates

Azure DevOps

GitHub Actions

Defender for Cloud

Sentinel

Job description

• Lead the design and implementation of enterprise-scale Azure architectures and Landing Zones.
• Define cloud governance, subscription strategy, management groups, policies, RBAC, and resource organization standards.
• Architect Hub-Spoke, Virtual WAN, hybrid cloud, and multi-region Azure environments.
• Design and implement Microsoft Entra ID solutions including Hybrid Identity, SSO, MFA, Conditional Access, PIM, Identity Governance, and Zero Trust architectures.
• Develop cloud security architectures leveraging Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and compliance frameworks.
• Drive Infrastructure-as-Code (Terraform, Bicep, ARM Templates) and CI/CD automation using Azure DevOps and GitHub Actions.
• Design monitoring, observability, disaster recovery, and business continuity solutions.
• Engage with business and technical stakeholders, lead architecture reviews, and mentor cloud engineering teams.

Area(s) of responsibility

• Lead the design and implementation of enterprise-scale Azure architectures and Landing Zones.
• Define cloud governance, subscription strategy, management groups, policies, RBAC, and resource organization standards.
• Architect Hub-Spoke, Virtual WAN, hybrid cloud, and multi-region Azure environments.
• Design and implement Microsoft Entra ID solutions including Hybrid Identity, SSO, MFA, Conditional Access, PIM, Identity Governance, and Zero Trust architectures.
• Develop cloud security architectures leveraging Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and compliance frameworks.
• Drive Infrastructure-as-Code (Terraform, Bicep, ARM Templates) and CI/CD automation using Azure DevOps and GitHub Actions.
• Design monitoring, observability, disaster recovery, and business continuity solutions.
• Engage with business and technical stakeholders, lead architecture reviews, and mentor cloud engineering teams.

Key Responsibilities

• Lead the design and implementation of enterprise-scale Azure architectures and Landing Zones.
• Define cloud governance, subscription strategy, management groups, policies, RBAC, and resource organization standards.
• Architect Hub-Spoke, Virtual WAN, hybrid cloud, and multi-region Azure environments.
• Design and implement Microsoft Entra ID solutions including Hybrid Identity, SSO, MFA, Conditional Access, PIM, Identity Governance, and Zero Trust architectures.
• Develop cloud security architectures leveraging Defender for Cloud, Sentinel, Key Vault, Azure Firewall, and compliance frameworks.
• Drive Infrastructure-as-Code (Terraform, Bicep, ARM Templates) and CI/CD automation using Azure DevOps and GitHub Actions.
• Design monitoring, observability, disaster recovery, and business continuity solutions.
• Engage with business and technical stakeholders, lead architecture reviews, and mentor cloud engineering teams.

Required Skills

• Azure Landing Zone Architecture
• Microsoft Entra ID & Identity Governance
• Azure Networking, Security, and Governance
• Azure Virtual WAN, Management Groups, Azure Policy
• Terraform, Bicep, ARM Templates
• Azure DevOps & GitHub Actions
• Microsoft Defender for Cloud & Sentinel
• Hybrid Cloud and Migration Architectures
• Zero Trust Security Framework

Experience & Qualifications

• 12+ years of overall IT experience with 7+ years in Azure Cloud Architecture.
• Proven experience designing and deploying Azure Landing Zones at enterprise scale.
• Strong expertise in Microsoft Entra ID and identity modernization initiatives.
• Experience with cloud migrations, platform modernization, and governance implementation.
• Strong stakeholder management and technical leadership skills.

Preferred Certifications

• Azure Solutions Architect Expert (AZ-305)
• Azure Administrator Associate (AZ-104)
• Identity and Access Administrator Associate (SC-300)
• Azure Security Engineer (AZ-500)
• TOGAF (Preferred)

Success Measures

• Successful deployment of enterprise Azure Landing Zones.
• Secure and compliant Microsoft Entra implementation.
• Reduced cloud operational risks through governance and automation.
• Standardized Azure architecture across business units.
• Improved identity security posture aligned to Zero Trust principles.