Cloud Infrastructure Architect (Azure)

We are seeking a highly skilled Terraform & Azure Cloud Infrastructure Architect to lead the design, migration, and automation of enterprise cloud infrastructure. The role involves transforming existing environments into a fully automated Infrastructure-as-Code (IaC) model, ensuring scalability, security, and disaster recovery readiness across multi-region deployments.
‍

Key Responsibilities:

1. Discovery & Planning

• Perform detailed audit of existing infrastructure across: Azure, Cloudflare, Fortigate, Entra ID, and Intune

• Design a modular Terraform architecture supporting:
- Multiple environments (UAT, Production)
- Multi-region deployment (UAE, Singapore)
- Define multi-hub and spoke network architecture

• Plan and design Disaster Recovery (DR) strategy:
- Zonal DR / UAE Central / Singapore DR site

• Establish:

- Naming conventions
- Tagging strategy
- Governance standards

• Define remote state management strategy using Azure Storage with locking
‍

2. IaC Development & Migration

• Import existing infrastructure into Terraform state

• Generate and maintain Terraform (HCL) code

• Build reusable Terraform modules for:

- Networking
- Compute
- Security components

• Implement variable-driven configurations (tfvars) for environment flexibility

• Develop and maintain a centralized Module Registry

• Build and configure:
- DR-ready Singapore connectivity hub
- UDRs, firewall rules, application gateway routing for failover
‍

3. CI/CD Pipeline Implementation

• Set up CI/CD pipelines using: Azure DevOps or GitHub Actions

• Implement pipeline stages for: UAT and Production deployments

• Integrate security & quality tools:
- terraform fmt, validate
- TFLint, tfsec
- Open Policy Agent (OPA)
- Infracost

• Implement manual approval gates for production releases
‍

4. Governance, Security & Guardrails

• Implement remote state management: Azure Blob Storage with versioning & lease locking

• Enable configuration drift detection: Firefly or scheduled Terraform plans

• Enforce pre-deployment validation checks

• Implement:

- Resource locks to prevent accidental deletion
- Policy enforcement for compliance
- Ensure consistency using variable layering strategy
‍

Required Technical Skills:

- Strong hands-on experience with:

- Terraform (advanced level)

- Microsoft Azure (IaaS & PaaS services)
‍

Experience with:

- Azure Networking (VNet, NSG, UDR, VPN Gateway, Bastion)

- Azure Security (Key Vault, Firewall, WAF, Managed Identity)

- Monitoring (Log Analytics, Alerts, Workbooks)
‍

Knowledge of:

- Multi-region DR architecture

- Hub-Spoke networking models
‍

Experience in:

- CI/CD tools (Azure DevOps / GitHub Actions)

- Policy as Code (OPA, Checkov)

- Familiarity with:

- Cloudflare & Fortigate integrations

- Entra ID (Azure AD) & Intune
‍

Key Azure Resources Experience (Preferred):

- Virtual Machines, VM Scale Sets

- Virtual Networks, Application Gateway, Firewall

- Storage Accounts, Private Endpoints, DNS Zones

- API Management, Function Apps, Logic Apps

- Azure Monitor, Alerts, Log Analytics

- Recovery Services Vault (Backup & DR)

- Azure OpenAI / Cognitive Services (optional but preferred)
‍

Soft Skills:

- Strong problem-solving and analytical thinking

- Ability to work in high-pressure environments

- Excellent communication and stakeholder management

- Experience working in global/multi-region teams

‍

Nice to Have:

- Experience in large-scale enterprise cloud transformation projects

- Exposure to cost optimization tools (Infracost)
‍

Certifications:

- Azure Solutions Architect Expert

- HashiCorp Terraform Certification

‍