Job description

## About Minfy

Minfy Technologies is a cloud-native IT services company helping enterprises across India and global markets build, run, and secure mission-critical workloads across hybrid and multi-cloud environments. Our practice spans cloud infrastructure, platform engineering, managed services, DevOps, data engineering, and cybersecurity, underpinned by our Kavach360 security programme (ISO 27001, SOC 2, and DPDP Act alignment).

## The role

The Hybrid Cloud Platform Architect designs and owns the foundational platform that enterprise workloads run on across on-premises, Azure, and a secondary public cloud. You define the landing zones, hybrid connectivity, identity, governance, and self-service tooling that let engineering teams deliver quickly and safely — and you set the standards for reliability, security, and cost that keep the platform healthy at scale. This is a hands-on architecture role: you build reference implementations and Infrastructure-as-Code, not just diagrams, and you mentor the engineers who extend the platform. Azure is the primary environment; you bring working depth in AWS or GCP to design and operate genuinely hybrid, multi-cloud solutions.

## What you'll do

**Platform foundation and landing zones**

- Design and govern enterprise-scale Azure landing zones using the Cloud Adoption Framework and Well-Architected Framework: management-group hierarchy, subscription topology, guardrails, and policy-as-code (Azure Policy).

- Establish the equivalent foundation in the secondary cloud (AWS Control Tower / Organizations or GCP organisation and folder structure) where workloads span providers.

**Hybrid architecture and connectivity**

- Architect hybrid connectivity and network topology: hub-spoke / virtual WAN, ExpressRoute and VPN, DNS, and segmentation across data centre and cloud.

- Extend cloud control planes to on-premises and edge using Azure Arc (and Azure Stack / VMware integration where relevant), enabling consistent governance across hybrid estate.

**Identity, security, and governance**

- Design identity and access with Microsoft Entra ID (federation, Conditional Access, PIM/PAM), least-privilege RBAC, Key Vault, and secrets management.

- Embed security and data protection by design — encryption, network controls, and Defender for Cloud — and align the platform with DPDP, ISO 27001, and SOC 2 obligations.

- Run architecture review and approval, guardrails, and the technical standards that ensure consistency and operational excellence.

**Automation and platform engineering**

- Build reusable Infrastructure-as-Code (Terraform and/or Bicep) modules, CI/CD pipelines, and golden paths that give product teams safe, self-service provisioning.

- Architect container and orchestration platforms (AKS, with EKS / GKE in the secondary cloud) and the surrounding supply-chain and policy controls.

**Reliability, observability, and cost**

- Define HA, DR, and backup architectures to agreed RTO/RPO targets, and design observability (Azure Monitor, Log Analytics, and equivalents) for actionable platform health.

- Lead FinOps practice for the platform: right-sizing, commitment-based discounts (Reserved Instances / Savings Plans / committed use), tagging, and cost visibility and accountability.

**Leadership and consulting**

- Act as technical authority across engagements, partnering with client architecture and infrastructure teams to shape platform strategy and roadmaps.

- Mentor platform and cloud engineers, and contribute to presales, solution workshops, and effort estimation.

## What you'll bring

**Required**

- 10+ years in technology, with 5+ years architecting cloud or hybrid platforms.

- Deep, hands-on Microsoft Azure expertise across networking, identity and security, compute, storage, and HA/DR — at Azure Solutions Architect Expert standard.

- Proven design and ownership of Azure landing zones (CAF), governance with Azure Policy, and Entra ID-based identity and access.

- Strong hybrid experience: ExpressRoute / hybrid networking, Azure Arc, and integration with on-premises or VMware environments.

- Infrastructure-as-Code with Terraform and/or Bicep, plus CI/CD; container orchestration with Kubernetes (AKS).

- Working knowledge of either AWS or GCP sufficient to architect and operate multi-cloud solutions.

- Excellent client-facing communication and the ability to set standards and mentor engineers.

**Preferred**

- Certifications in the secondary cloud (AWS Solutions Architect, GCP Professional Cloud Architect).

- Platform engineering / internal developer platform experience (golden paths, self-service, policy-as-code).

- FinOps certification and experience operating cost governance at scale.

- Observability and SRE practices; experience in a regulated or enterprise delivery environment.

**Certifications (expected)**

- Microsoft Certified: Azure Solutions Architect Expert (required or to be achieved within an agreed timeframe)

- AWS Certified Solutions Architect or Google Professional Cloud Architect (advantageous)

## What success looks like

- Within 90 days: a reference Azure landing zone and IaC baseline adopted on at least one engagement, with review standards in use by the team.

- Within 6–12 months: a repeatable, self-service hybrid platform pattern in production across engagements, measurable cost optimization delivered, and a demonstrable uplift in the engineer's you mentor.

## Why Minfy

You will own the platform foundations that enterprise workloads depend on, with the autonomy of a senior architect, the support of a strong practice, and a clear path to shape how we build hybrid cloud at scale.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Someone shared one job with you. ASAI keeps finding the rest.