{"id":4045322,"url":"https://alion.io/job/aqilea-azure-network-and-security-architect-cloud-area","title":"Azure network and security architect (Cloud Area)","company":{"id":723133,"name":"Aqilea","domain":"aqilea.com","url":"https://alion.io/company/aqilea","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-10T21:30:40Z","employer_posted_date":null,"last_verified_at":"2026-11-10T21:30:40Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Role: Azure network and security architect (Cloud Area)\nJob Ref Id: JD-1346\nCompetence level: 10 + Years\nStart date: 2026-11-15\nEnd date: 2027-05-31\nExtension option: Yes\nScope: Yes\nLocation: India\nRemote work: Yes\nLanguage: English\nApplication deadline: 2026-11-30\nNumber of consultants: 1\nSecurity clearance: No\nAbout the assignmentWe are looking for a highly skilled Senior Azure Cloud Architect with deep expertise in Azure Networking, Azure Security, and Enterprise-scale Landing Zone architecture. You will design, build, secure and operate production-grade Azure environments aligned with the Microsoft Cloud Adoption Framework and Well-Architected Framework, using Infrastructure-as-Code, automation, governance and identity/security controls. The role includes acting as a technical advisor, leading cloud transformation initiatives and mentoring engineering teams, requiring strong communication and stakeholder management.ResponsibilitiesDesign and implement enterprise-grade Azure Landing Zones aligned with Microsoft Cloud Adoption Framework, Azure Enterprise-Scale Architecture and Zero Trust Security Model.\n\nDefine and implement management groups hierarchy, subscription strategy and lifecycle management, resource organization standards, naming conventions and tagging strategy, RBAC and identity governance, and policy-driven governance and compliance.\n\nEstablish multi-subscription, multi-environment (Prod/Non-Prod/Sandbox) architecture.\n\nAzure Networking:\n\nArchitect secure and scalable network topologies including Hub-and-Spoke, Virtual WAN, ExpressRoute and Site-to-Site VPN connectivity.\n\nDesign private connectivity patterns such as Private Endpoints and Private DNS Zones and implement Azure Firewall, NSGs, ASGs, route tables, load balancers, Application Gateway and Front Door.\n\nDesign IP addressing strategy and network segmentation, implement network security controls and traffic inspection models, and optimize network performance, availability and resiliency.\n\nAzure Security & Governance:\n\nImplement enterprise security posture using Microsoft Defender for Cloud, Azure Policy and Initiative assignments, Azure Blueprints (where applicable), Conditional Access, Identity Protection and Privileged Identity Management.\n\nDesign secure identity architecture using Entra ID (Azure AD), RBAC models, least-privilege access and Managed Identities.\n\nEnsure compliance with regulatory standards (ISO, SOC2, CIS, NIST as applicable) and establish logging, monitoring, SIEM integration and audit controls.\n\nInfrastructure as Code & Automation:\n\nDevelop reusable, modular Infrastructure-as-Code using Terraform (preferred) and/or Bicep.\n\nCreate standardized deployment pipelines using Azure DevOps or GitHub Actions and implement CI/CD practices for infrastructure delivery.\n\nEnforce version control, peer reviews, testing and promotion pipelines and automate provisioning, governance, security baselines and guardrails.\n\nOperations, Reliability & Cost Management:\n\nDesign for high availability and disaster recovery, backup and recovery, scalability and performance optimization.\n\nImplement observability using Azure Monitor, Log Analytics and Application Insights and enable cost governance using Cost Management, budgeting and rightsizing.\n\nStakeholder Engagement & Leadership:\n\nTranslate business requirements into technical architecture and produce high-quality architecture documentation, diagrams and runbooks.\n\nLead technical discussions with customers, auditors, security teams and delivery teams, mentor junior engineers, and participate in design reviews, audits and governance forums.\n\nRequirements\nMandatory\n\nExperience: 10+ Years\n\nStrong hands-on expertise with: Microsoft Azure platform (IaaS, PaaS, Networking, Security); Azure Landing Zone design and deployment; Enterprise networking architectures; Identity and access management; Azure security tooling and governance\n\nExpert-level proficiency in: Terraform and/or Bicep; Git-based workflows; CI/CD pipelines for infrastructure\n\nDeep knowledge of: TCP/IP, DNS, routing, firewall concepts; Hybrid connectivity models; Cloud security best practices; Infrastructure automation patterns\n\nExperience working in multi-subscription, enterprise environments.\n\nOriginally posted on Himalayas","description_format":"text","description_chars":4275,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-10T23:28:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/aqilea-azure-network-and-security-architect-cloud-area","json_url":"https://alion.io/job/aqilea-azure-network-and-security-architect-cloud-area.json","meta":{"generated_at":"2026-11-11T10:29:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17938,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":723133},"rest":"https://alion.io/mcp/rest/get_company?id=723133"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faqilea-azure-network-and-security-architect-cloud-area"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faqilea-azure-network-and-security-architect-cloud-area"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faqilea-azure-network-and-security-architect-cloud-area"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aqilea-azure-network-and-security-architect-cloud-area\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faqilea-azure-network-and-security-architect-cloud-area"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4045322}},{"tool":"search_jobs","arguments":{"company":"aqilea.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4045322},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}