Azure Cloud Technical Lead

Job Description
Key Responsibilities

Cloud Architecture & Design

• Design end-to-end Azure cloud architectures for PaaS, IaaS, and Hybrid workloads.
• Define reference architectures for GenAI, document intelligence, OCR, and underwriting platforms.
• Architect scalable solutions using Azure App Service, AKS, Azure Container Registry, Azure Storage, and Azure databases.
• Drive cloud design reviews, architecture sign-offs, and technical governance.

Security & Compliance

• Design secure architectures using: Azure AD (Entra ID), RBAC, MFA, Azure Key Vault, Private Endpoints, NSGs, Azure Application Gateway with WAF.
• Ensure compliance with BFSI regulations, SOC2, GDPR, PII data protection, and internal security policies.
• Work with cybersecurity teams on threat modeling, VNET isolation, and zero-trust patterns.

DevOps & Operations

• Define DevOps and CI/CD strategies using Azure DevOps, Git repositories, and container pipelines.
• Integrate monitoring and observability using Azure Monitor, Application Insights, and Log Analytics.
• Define DR, backup, high availability, and resiliency patterns (RTO/RPO).

GenAI & Advanced Services (Good to Have)

• Architect solutions using Azure OpenAI, Azure Cognitive Services (Document Intelligence, Computer Vision).
• Design secure GenAI pipelines with controlled data usage and no client data leakage.
• Support AI workloads running on AKS/App Services with monitoring and cost controls.

Stakeholder & Delivery Collaboration

• Partner with Product Owners, SMEs, and business users to translate requirements into cloud designs.
• Support presales, RFP responses, architecture walkthroughs, and client discussions.
• Provide technical guidance to development and infrastructure teams.

Required Skills

Azure Core Services

• Azure App Service, AKS, VM, VNET, Load Balancer
• Azure Storage (Blob, File), Azure SQL / PostgreSQL
• Azure Container Registry
• Azure Key Vault, Azure Monitor, Application Insights

Security & Identity

• Azure AD / Entra ID, RBAC, Managed Identity
• WAF, Private Link, Defender for Cloud

Architecture & Delivery

• Cloud design patterns, microservices, containerization
• Experience with large-scale enterprise and BFSI solutions
• Strong knowledge of NFRs (Performance, Security, Scalability)

Roles & Responsibilities

Cloud Architecture & Design

• Design end-to-end Azure cloud architectures for PaaS, IaaS, and Hybrid workloads.
• Define reference architectures for GenAI, document intelligence, OCR, and underwriting platforms.
• Architect scalable solutions using Azure App Service, AKS, Azure Container Registry, Azure Storage, and Azure databases.
• Drive cloud design reviews, architecture sign-offs, and technical governance.

Security & Compliance

• Design secure architectures using: Azure AD (Entra ID), RBAC, MFA, Azure Key Vault, Private Endpoints, NSGs, Azure Application Gateway with WAF.
• Ensure compliance with BFSI regulations, SOC2, GDPR, PII data protection, and internal security policies.
• Work with cybersecurity teams on threat modeling, VNET isolation, and zero-trust patterns.

DevOps & Operations

• Define DevOps and CI/CD strategies using Azure DevOps, Git repositories, and container pipelines.
• Integrate monitoring and observability using Azure Monitor, Application Insights, and Log Analytics.
• Define DR, backup, high availability, and resiliency patterns (RTO/RPO).

GenAI & Advanced Services (Good to Have)

• Architect solutions using Azure OpenAI, Azure Cognitive Services (Document Intelligence, Computer Vision).
• Design secure GenAI pipelines with controlled data usage and no client data leakage.
• Support AI workloads running on AKS/App Services with monitoring and cost controls.