Sonata Software - Azure Cloud Architect

Role Overview: Role is offshore with remote participation with atleast 5 hours overlap with US business hours for architecture workshops. Cloud Architecture & M&A Integration (Primary Azure, Secondary AWS): - Lead M&A discovery: Assess target companies' IT environments, cloud footprints, and infrastructure maturity. - Design integration/spin-off strategies: Define day-1 connectivity, day-2 migration phases, and final-state architecture for tenant-to-tenant migrations. - Architect Azure landing zones: Design scalable, secure, and compliant multi-tenant Azure environments. - Execute tenant consolidations: Migrate workloads, identities, and subscriptions seamlessly between distinct enterprise environments. Infrastructure & Core Network Services: - Architect hybrid DNS: Design resilient DNS routing architectures spanning on-premises data centers, Azure Private DNS, and public DNS providers. - Manage IPAM and DHCP: Oversee IP address management (IPAM) and DHCP strategies to prevent IP conflicts across merging enterprise networks. - Implement secure routing: Architect Hub-and-Spoke networks, Azure Virtual WAN, ExpressRoute, and VPN gateways. Security & PKI (Public Key Infrastructure): - Design enterprise PKI: Architect and manage digital certificate lifecycles, root/subordinate Certificate Authorities (CAs), and registration authorities. - Secure cloud workloads: Integrate PKI with Azure Key Vault, App Gateways, and API Management services for robust encryption in transit. - Enforce compliance: Establish certificate automated renewal processes (e.g., ACME protocol) to prevent service outages. Required Technical Skills and Qualifications: Core Experience: - Experience: 10 - 12 years in IT infrastructure, with at least 5+ years dedicated strictly to cloud architecture. - M&A Track Record: Proven experience leading the technical integration of at least 2 structural corporate mergers or acquisitions. Azure Expertise: - Deep knowledge of Azure Management Groups, Subscriptions, Policy, and Blueprints. - Advanced proficiency in Azure Active Directory (Microsoft Entra ID) and cross-tenant synchronization. - Infrastructure as Code (IaC) mastery using Terraform, Bicep, or Azure Resource Manager (ARM) templates. Network & Security Services: - Expert-level understanding of DNS (split-horizon, forwarding, private zones) and DHCP architectures. - Hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or third-party PKI providers (DigiCert, Venafi, PrimeKey). Preferred & Advantageous Skills: - Multi-Cloud Capabilities: Hands-on architectural experience with AWS services (VPC, Route 53, IAM, AWS Certificate Manager) is a strong plus. - Certifications: Microsoft Certified: Azure Solutions Architect Expert, AWS Certified Solutions Architect - Associate/Professional Additional skills on AWS will be an advantage.