Cloud Solution Architect

# # About Minfy Minfy Technologies is a cloud-native IT services company helping enterprises across India and global markets build, run, and secure mission-critical workloads across hybrid and multi-cloud environments. Our practice spans cloud infrastructure, platform engineering, managed services, DevOps, data engineering, and cybersecurity, underpinned by our Kavach360 security programme (ISO 27001, SOC 2, and DPDP Act alignment). ## The role The Hybrid Cloud Platform Architect designs and owns the foundational platform that enterprise workloads run on across on-premises, Azure, and a secondary public cloud. You define the landing zones, hybrid connectivity, identity, governance, and self-service tooling that let engineering teams deliver quickly and safely — and you set the standards for reliability, security, and cost that keep the platform healthy at scale. This is a hands-on architecture role: you build reference implementations and Infrastructure-as-Code, not just diagrams, and you mentor the engineers who extend the platform. Azure is the primary environment; you bring working depth in AWS or GCP to design and operate genuinely hybrid, multi-cloud solutions. # # What you'll do **Platform foundation and landing zones** - Design and govern enterprise-scale Azure landing zones using the Cloud Adoption Framework and Well-Architected Framework: management-group hierarchy, subscription topology, guardrails, and policy-as-code (Azure Policy). - Establish the equivalent foundation in the secondary cloud (AWS Control Tower / Organizations or GCP organisation and folder structure) where workloads span providers. **Hybrid architecture and connectivity* * - Architect hybrid connectivity and network topology: hub-spoke / virtual WAN, ExpressRoute and VPN, DNS, and segmentation across data centre and cloud. - Extend cloud control planes to on-premises and edge using Azure Arc (and Azure Stack / VMware integration where relevant), enabling consistent governance across hybrid estate. ** Identity, security, and governance** - Design identity and access with Microsoft Entra ID (federation, Conditional Access, PIM/PAM), least-privilege RBAC, Key Vault, and secrets management. - Embed security and data protection by design — encryption, network controls, and Defender for Cloud — and align the platform with DPDP, ISO 27001, and SOC 2 obligations. - Run architecture review and approval, guardrails, and the technical standards that ensure consistency and operational excellence. **Automation and platform engineering** - Build reusable Infrastructure-as-Code (Terraform and/or Bicep) modules, CI/CD pipelines, and golden paths that give product teams safe, self-service provisioning. - Architect container and orchestration platforms (AKS, with EKS / GKE in the secondary cloud) and the surrounding supply-chain and policy controls. **Reliability, observability, and cost** - Define HA, DR, and backup architectures to agreed RTO/RPO targets, and design observability (Azure Monitor, Log Analytics, and equivalents) for actionable platform health. - Lead FinOps practice for the platform: right-sizing, commitment-based discounts (Reserved Instances / Savings Plans / committed use), tagging, and cost visibility and accountability. **Leadership and consulting** - Act as technical authority across engagements, partnering with client architecture and infrastructure teams to shape platform strategy and roadmaps. - Mentor platform and cloud engineers, and contribute to presales, solution workshops, and effort estimation. ## What you'll bring **Required* * - 10+ years in technology, with 5+ years architecting cloud or hybrid platforms. - Deep, hands-on Microsoft Azure expertise across networking, identity and security, compute, storage, and HA/DR — at Azure Solutions Architect Expert standard. - Proven design and ownership of Azure landing zones (CAF), governance with Azure Policy, and Entra ID-based identity and access. - Strong hybrid experience: ExpressRoute / hybrid networking, Azure Arc, and integration with on-premises or VMware environments. - Infrastructure-as-Code with Terraform and/or Bicep, plus CI/CD; container orchestration with Kubernetes (AKS). - Working knowledge of either AWS or GCP sufficient to architect and operate multi-cloud solutions. - Excellent client-facing communication and the ability to set standards and mentor engineers. **Preferred** - Certifications in the secondary cloud (AWS Solutions Architect, GCP Professional Cloud Architect). - Platform engineering / internal developer platform experience (golden paths, self-service, policy-as-code). - FinOps certification and experience operating cost governance at scale. - Observability and SRE practices; experience in a regulated or enterprise delivery environment. **Certifications (expected)** - Microsoft Certified: Azure Solutions Architect Expert (required or to be achieved within an agreed timeframe) - AWS Certified Solutions Architect or Google Professional Cloud Architect (advantageous) ## What success looks like - Within 90 days: a reference Azure landing zone and IaC baseline adopted on at least one engagement, with review standards in use by the team. - Within 6–12 months: a repeatable, self-service hybrid platform pattern in production across engagements, measurable cost optimization delivered, and a demonstrable uplift in the engineer's you mentor. ## Why Minfy You will own the platform foundations that enterprise workloads depend on, with the autonomy of a senior architect, the support of a strong practice, and a clear path to shape how we build hybrid cloud at scale.