{"id":1230412,"url":"https://alion.io/job/sonata-software-azure-cloud-architect","title":"Azure Cloud Architect","company":{"id":5150,"name":"Sonata Software","domain":"sonata-software.com","url":"https://alion.io/company/sonata-software","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":55000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":603},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-09-18T12:08:42Z","employer_posted_date":null,"last_verified_at":"2026-09-18T12:08:42Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"Role Overview:\n\nRole is offshore with remote participation with atleast 5 hours overlap with US business hours for architecture workshops.\n\nCloud Architecture & M&A Integration (Primary Azure, Secondary AWS):\n\n- Lead M&A discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity.\n\n- Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations.\n\n- Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments.\n\n- Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments.\n\nInfrastructure & Core Network Services:\n\n- Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers.\n\n- Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks.\n\n- Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways.\n\nSecurity & PKI (Public Key Infrastructure):\n\n- Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities.\n\n- Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways, and API Management services for robust encryption in transit.\n\n- Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages.\n\nRequired Technical Skills and Qualifications:\n\nCore Experience:\n\n- Experience: 10 - 12 years in IT infrastructure, with at least 5+ years dedicated strictly to cloud architecture.\n\n- M&A Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions.\n\nAzure Expertise:\n\n- Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints.\n\n- Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization.\n\n- Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates.\n\nNetwork & Security Services:\n\n- Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures.\n\n- Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey).\n\nPreferred & Advantageous Skills:\n\n- Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a strong plus.\n\n- Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional\n\nAdditional skills on AWS will be an advantage.\nSkills\nCloud Architect, Azure, Terraform, Identity Management, AWS, Solution Architect, Microsoft PKI, IPAM","description_format":"text","description_chars":3001,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-09-25T14:00:00Z"}],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.695,"p_room":0.945,"age_days":9,"expected_fill_days":22,"reasons":["seen:9","velocity","win:mid"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sonata-software-azure-cloud-architect","json_url":"https://alion.io/job/sonata-software-azure-cloud-architect.json","meta":{"generated_at":"2026-09-28T22:40:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":311,"day_limit":5000,"remaining_today":4689,"minute_limit":60,"resets_at":"2026-09-29T00:00:00Z"}}}