Establish the equivalent foundation in the secondary cloud (AWS Control Tower / Organizations or GCP organisation and folder structure) where workloads span providers.
Hybrid architecture and connectivity**
Architect hybrid connectivity and network topology: hub-spoke / virtual WAN, ExpressRoute and VPN, DNS, and segmentation across data centre and cloud.
Extend cloud control planes to on-premises and edge using Azure Arc (and Azure Stack / VMware integration where relevant), enabling consistent governance across hybrid estate.
Identity, security, and governance**
Design identity and access with Microsoft Entra ID (federation, Conditional Access, PIM/PAM), least-privilege RBAC, Key Vault, and secrets management.
Embed security and data protection by design — encryption, network controls, and Defender for Cloud — and align the platform with DPDP, ISO 27001, and SOC 2 obligations.
Run architecture review and approval, guardrails, and the technical standards that ensure consistency and operational excellence.
Automation and platform engineering**
Build reusable Infrastructure-as-Code (Terraform and/or Bicep) modules, CI/CD pipelines, and golden paths that give product teams safe, self-service provisioning.
Architect container and orchestration platforms (AKS, with EKS / GKE in the secondary cloud) and the surrounding supply-chain and policy controls.
Reliability, observability, and cost**
Define HA, DR, and backup architectures to agreed RTO/RPO targets, and design observability (Azure Monitor, Log Analytics, and equivalents) for actionable platform health.
Lead FinOps practice for the platform: right-sizing, commitment-based discounts (Reserved Instances / Savings Plans / committed use), tagging, and cost visibility and accountability.
Leadership and consulting**
Act as technical authority across engagements, partnering with client architecture and infrastructure teams to shape platform strategy and roadmaps.
Mentor platform and cloud engineers, and contribute to presales, solution workshops, and effort estimation.
## What you'll bring
Required**
10+ years in technology, with 5+ years architecting cloud or hybrid platforms.
Deep, hands-on Microsoft Azure expertise across networking, identity and security, compute, storage, and HA/DR — at Azure Solutions Architect Expert standard.
Proven design and ownership of Azure landing zones (CAF), governance with Azure Policy, and Entra ID-based identity and access.
Strong hybrid experience: ExpressRoute / hybrid networking, Azure Arc, and integration with on-premises or VMware environments.
Infrastructure-as-Code with Terraform and/or Bicep, plus CI/CD; container orchestration with Kubernetes (AKS).
Working knowledge of either AWS or GCP sufficient to architect and operate multi-cloud solutions.
Excellent client-facing communication and the ability to set standards and mentor engineers.
Preferred**
Certifications in the secondary cloud (AWS Solutions Architect, GCP Professional Cloud Architect).
Platform engineering / internal developer platform experience (golden paths, self-service, policy-as-code).
FinOps certification and experience operating cost governance at scale.
Observability and SRE practices; experience in a regulated or enterprise delivery environment.
Certifications (expected)**
Microsoft Certified: Azure Solutions Architect Expert (required or to be achieved within an agreed timeframe)
AWS Certified Solutions Architect or Google Professional Cloud Architect (advantageous)
## What success looks like
Within 90 days: a reference Azure landing zone and IaC baseline adopted on at least one engagement, with review standards in use by the team.
Within 6–12 months: a repeatable, self-service hybrid platform pattern in production across engagements, measurable cost optimization delivered, and a demonstrable uplift in the engineer's you mentor.
## Why Minfy
You will own the platform foundations that enterprise workloads depend on, with the autonomy of a senior architect, the support of a strong practice, and a clear path to shape how we build hybrid cloud at scale.
