About this role

Job Description: Hybrid Cloud Architect

Position

Hybrid Cloud Architect

Experience

10-15 Years (Minimum 5+ years in Cloud Architecture)

Location

Hybrid / Onsite

The architect will lead cloud transformation initiatives, establish cloud architecture standards, drive modernization programs, and provide technical leadership across global infrastructure environments.

---

Key Responsibilities

Hybrid Cloud Strategy & Architecture

- Design and implement Hybrid Cloud solutions integrating on-premises and cloud platforms.
- Define cloud adoption roadmaps and migration strategies.
- Develop cloud reference architectures, standards, and governance frameworks.
- Lead cloud transformation and modernization programs.
- Perform cloud readiness assessments and architectural reviews.
- Drive infrastructure optimization, scalability, and resiliency initiatives.

---

Cloud Platforms

Microsoft Azure

- Azure Landing Zone (ALZ) design and implementation.
- Azure Virtual Machines, Storage, Networking.
- Azure Kubernetes Service (AKS).
- Azure Virtual Desktop (AVD).
- Azure Backup and Site Recovery.
- Azure Monitor, Log Analytics, and Sentinel.
- Azure Governance and Cost Management.

AWS

- AWS Landing Zone and multi-account strategy.
- EC2, S3, EBS, RDS.
- VPC, Transit Gateway, Route53.
- EKS and ECS.
- IAM and Security Services.
- CloudWatch and AWS Backup.

---

Infrastructure & Virtualization

- VMware vSphere Administration.
- VMware ESXi and vCenter.
- Hybrid cloud integration using VMware Cloud solutions.
- Storage and compute optimization.
- High Availability (HA) and Disaster Recovery (DR) architecture.
- Datacenter modernization initiatives.

---

Containerization & Orchestration

Mandatory

- Kubernetes Administration and Architecture.
- AKS and EKS deployments.
- Container lifecycle management.
- Helm Charts.
- Docker and Container Platforms.
- Service Mesh concepts.
- Kubernetes Security best practices.

Preferred

- OpenShift
- Rancher
- Tanzu Kubernetes Grid

---

Cloud Networking

- DNS, DHCP, TCP/IP.
- Azure Networking.
- AWS Networking.
- VPN Connectivity.
- ExpressRoute.
- Direct Connect.
- Load Balancers and Application Gateways.
- NSG, Security Groups, WAF.
- Network Segmentation and Zero Trust Architecture.

---

Identity & Security

Microsoft Entra ID

- Hybrid Identity Architecture.
- Azure AD Connect.
- Conditional Access.
- Single Sign-On (SSO).
- MFA Implementation.
- Privileged Identity Management (PIM).

Security

- Zero Trust Framework.
- Cloud Security Architecture.
- Defender for Cloud.
- Microsoft Sentinel.
- IAM, PAM, and RBAC.
- Security Compliance and Governance.
- Vulnerability and Risk Management.

---

Automation & Infrastructure as Code

Mandatory Skills

- Terraform
- Ansible
- PowerShell
- Python
- GitHub
- GitHub Actions

CI/CD

- Azure DevOps
- Jenkins
- GitLab CI/CD
- Infrastructure Automation
- Cloud Provisioning Automation

---

Monitoring & Observability

- Azure Monitor
- AWS CloudWatch
- Grafana
- Prometheus
- Splunk
- Dynatrace
- AppDynamics
- ELK Stack

---

Cloud Governance & FinOps

- Cloud Cost Optimization
- FinOps Best Practices
- Chargeback / Showback Models
- Resource Tagging Standards
- Cloud Policy Management
- Compliance Management
- Capacity Planning

---

Disaster Recovery & Business Continuity

- Cloud DR Design
- Azure Site Recovery
- AWS Disaster Recovery
- Backup and Recovery Strategies
- Business Continuity Planning
- Multi-Region Architecture

---

Required Technical Skills

Must Have

- Azure Architecture
- AWS Architecture
- Hybrid Cloud Design
- Kubernetes
- Docker
- VMware vSphere / ESXi
- Microsoft Entra ID
- Terraform
- Ansible
- Azure DevOps
- Cloud Security
- Networking
- Disaster Recovery

Good to Have

- Azure Landing Zone
- AWS Landing Zone Accelerator (LZA)
- OpenShift
- VMware Cloud Foundation
- Azure Virtual Desktop
- FinOps
- Service Mesh
- SRE Practices

---

Certifications Preferred

Microsoft

- Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
- Azure Administrator Associate (AZ-104)
- Cybersecurity Architect Expert (SC-100)

AWS

- AWS Certified Solutions Architect Professional
- AWS Advanced Networking Specialty

VMware

- VMware Certified Professional (VCP)
- VMware Certified Advanced Professional (VCAP)

Kubernetes

- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Application Developer (CKAD)

Additional

- TOGAF
- ITIL Foundation
- FinOps Certified Practitioner

---

Soft Skills

- Executive stakeholder management.
- Architecture governance leadership.
- Client-facing consulting experience.
- Technical proposal and solution design expertise.
- Strong presentation and documentation skills.
- Cross-functional leadership and mentoring.
- Experience supporting global enterprise clients.

---

Key Deliverables

- Cloud Strategy & Roadmap
- Hybrid Cloud Architecture Designs
- Migration Plans & Execution
- Security Architecture Reviews
- Cloud Governance Frameworks
- FinOps Optimization Reports
- Disaster Recovery Architecture
- Executive Architecture Presentations