Azure Infrastructure Architect - Cloud Services
First seen by Alion on Sep 17, 2026.
Job Description:
We are looking for experienced Azure Infrastructure / Cloud Architects with strong expertise in designing and managing enterprise-scale Azure environments. The ideal candidate should have hands-on experience across Azure infrastructure, Kubernetes, Infrastructure as Code, DevOps, security, and SRE/operations.
Total Experience: 8-13 years
Key Responsibilities:
- Design and manage enterprise-scale Azure Infrastructure and Landing Zones.
- Work with Management Groups, Subscriptions, Resource Groups, Azure Policy, and Azure RBAC.
- Implement and manage Microsoft Entra ID (Azure AD), Private Endpoints, Virtual Networks, VPN, and ExpressRoute.
- Manage Azure Key Vault, Azure Monitor, and enterprise cloud infrastructure.
- Design and implement Infrastructure as Code (IaC) using Terraform and GitOps practices.
- Deploy and manage AKS, Kubernetes, Docker, Helm, and Azure Container Registry.
- Work with Service Mesh technologies, with Istio preferred.
- Build and manage CI/CD pipelines using Azure DevOps and GitHub Actions.
- Work with GitHub Enterprise and artifact repositories such as JFrog.
- Implement cloud security and compliance using Zero Trust Architecture, IAM, RBAC, Managed Identities, NSGs, Private Link, and Defender for Cloud.
- Implement monitoring and observability using Azure Monitor, Log Analytics, Application Insights, OpenTelemetry, Prometheus, and Grafana.
- Collaborate with DevOps, security, application, and infrastructure teams to build secure, scalable, highly available Azure solutions.
- Drive automation, operational excellence, and SRE best practices across cloud environments.
Required Technical Skills:
- Azure Landing Zones, Management Groups, Subscriptions, Resource Groups
- Azure Policy, Azure RBAC, Microsoft Entra ID (Azure AD)
- Private Endpoints, Private Link, Virtual Networks, VPN, ExpressRoute
- Azure Key Vault, Azure Monitor
- Terraform (Preferred), Infrastructure as Code (IaC), GitOps
- AKS, Kubernetes, Docker, Helm, Azure Container Registry
- Service Mesh - Istio (Preferred)
- Azure DevOps, GitHub Enterprise, GitHub Actions
- CI/CD Pipelines, JFrog / Artifact Repositories
- Zero Trust Architecture, IAM, RBAC, Managed Identities
- Network Security Groups, Defender for Cloud
- Log Analytics, Application Insights, OpenTelemetry
- Prometheus, Grafana
- SRE, Cloud Security, Monitoring & Observability
Skills
Azure, Cloud Services, Azure Infrastructure, Azure Architect, Monitoring Tools, Site Reliability, IAC Terraform, Azure Kubernetes Service, VPN, Git