Azure Platform Architect - Security & Infrastructure

Job highlights

• Scripting: Hands-on experience with Python,PowerShell,or Bash for automating cloud administration tasks. . Certifications: Az-305,Az-104 certified candidate
• Required Skills Qualifications
• Experience Level: 6 - 8 Years.
• Experience: 6 to 8 years in cloud architecture,IT operations,or cloud security,with a proven track record of designing data platforms on cloud infrastructure.

Job Summary

Job Title: Azure Platform Architect - Security Infrastructure

Experience Level: 6 - 8 Years

Location: Pune/Remote

Employment Type: Full-Time

Role Overview: We are seeking an experienced Azure Platform Architect to design, implement, and govern the secure cloud infrastructure that underpins our enterprise data initiatives. In this critical role, you will partner closely with our Databricks Architecture team to design a robust, scalable security layer across the entire cloud platform. While the Databricks Architect focuses on data governance and control plane isolation, you will own the overarching Azure infrastructure, focusing on network security, identity and access management, and infrastructure automation. Together, you will ensure a cohesive, bulletproof architecture that meets rigorous enterprise compliance standards.

Key Responsibilities

• Collaborative Security Design: Work in strict conjunction with the Databricks Administrator/Architect to build an end-to-end secure ecosystem. Ensure that Azure network controls and Databricks platform guardrails are seamlessly integrated.
• Cloud Networking Perimeter Security: Architect and manage complex Azure networking topologies. Implement and optimize Virtual Networks (VNets), VNet peering, ExpressRoute, and Azure Private Link / Private Endpoints to prevent data exfiltration.
• Identity Access Management (IAM): Serve as the SME for Microsoft Entra ID (formerly Azure AD). Design centralized identity protocols, federated access (SAML, OAuth), and strict principle-of-least-privilege access models for all Azure resources.
• Platform Security Compliance: Establish Azure security controls, encryption (at rest and in transit), and vulnerability management practices. Manage secrets and certificates via Azure Key Vault, integrating them securely with downstream applications like Databricks.
• Infrastructure Automation (InfraOps): Lead the automation of platform deployments. Use Infrastructure as Code (IaC) tools such as Terraform, Bicep, or ARM templates to build, maintain, and scale complex, secure Azure environments.
• Observability Reliability: Design high availability (HA) and disaster recovery (DR) architectures. Implement comprehensive observability, auditing, and threat detection using Azure Monitor, Log Analytics, and Microsoft Sentinel.

Required Skills Qualifications

• Experience: 6 to 8 years in cloud architecture, IT operations, or cloud security, with a proven track record of designing data platforms on cloud infrastructure.
• Deep Azure Expertise: Hands-on, production-level experience with Microsoft Azure infrastructure, specifically centered around network security, identity management, and secure computing.
• Networking Mastery: Deep knowledge of Azure enterprise networking routing, segmentation, firewall management, and data exfiltration prevention techniques.
• Infrastructure as Code: Strong proficiency in deploying and governing cloud infrastructure using Terraform or Azure Bicep.
• Collaboration Skills: Proven ability to work cross-functionally alongside Data Architects, Security Engineers, and Developers to translate business requirements into Azure Well-Architected Framework compliant designs.
• Scripting: Hands-on experience with Python, PowerShell, or Bash for automating cloud administration tasks.
• Certifications: Az-305 , Az-104 certified candidate

Nice to Have

• Security Analytics: Experience configuring architectures that support security analytics, threat hunting, or integrating with SIEM tools.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.