Cloud Architect

About the role

Join XTIUM's global team as a Cloud Architect, driving the design and evolution of Azure‑based solutions that support AI platforms and enterprise services. You will own end‑to‑end cloud governance, architecture, and operational excellence while collaborating with security, engineering, and product teams.

Key responsibilities

• Design and evolve Azure landing zones following the Microsoft Cloud Adoption Framework and Well‑Architected Framework.
• Implement governance standards: subscription hierarchy, naming, tagging, RBAC, Azure Policy, Defender for Cloud, Sentinel, and Log Analytics.
• Architect highly available, multi‑region, zone‑redundant solutions for AI workloads and enterprise PaaS services.
• Deploy and manage Azure API Management instances to securely expose micro‑services.
• Build, operate, and secure production‑grade Azure Kubernetes Service (AKS) clusters, including networking, identity, and cost governance.
• Establish GitOps pipelines with Flux CD or Argo CD and define upgrade/patching cadences.
• Set up observability using Container Insights, Prometheus, Grafana, Application Insights, and OpenTelemetry.
• Design secure hub‑spoke networking, private endpoints, ExpressRoute/VPN connectivity, and Azure load‑balancing solutions.

Required profile

• Proven experience designing and managing complex Azure environments at enterprise scale.
• Strong understanding of cloud governance, security, and compliance frameworks.
• Hands‑on expertise with AKS, networking, and infrastructure‑as‑code concepts.
• Ability to work cross‑functionally and drive technical decisions.

Required skills

• Microsoft Azure (Landing Zones, Policy, Defender, Sentinel, Log Analytics)
• Azure Kubernetes Service (AKS) and Kubernetes ecosystem
• Azure networking (CNI, Overlay, Azure Firewall, Private Endpoints, ExpressRoute, VPN)
• GitOps tools: Flux CD, Argo CD
• Observability: Container Insights, Prometheus, Grafana, Application Insights, OpenTelemetry
• Identity & access: Entra ID, Managed Identities, RBAC, Azure Policy / Gatekeeper
• Azure API Management, Azure Load Balancer, Traffic Manager, Application Gateway
• Backup & DR tools: Velero