Cloud Network Architect – Azure

Company: Aqilea
Role: Cloud Network Architect – Azure
Job Ref Id: JD-1345
Competence level: 10 + Years
Start date: 2026-11-15
End date: 2027-05-31
Extension option: Yes
Scope: 100 %
Location: India
Remote work: Yes
Language: English
Application deadline: 2026-12-15
Number of consultants: 1
Security clearance: No
About the assignment
We are looking for a Cloud Network Architect – Azure to design, implement and optimize scalable, secure hybrid and multi‑cloud network architectures. The role focuses on Azure networking expertise, network automation (IaC) and DevOps practices to modernize network infrastructure and enable cloud migrations. The architect will lead network transformation initiatives and collaborate with cross‑functional teams to deliver robust, high‑performance networking solutions. Responsibilities
Architect and design scalable, secure, highly available Azure network solutions including topology diagrams, IP schemes and security policies.
Design hybrid connectivity between on‑premises data centers and Azure using ExpressRoute, VPN Gateway and Virtual WAN.
Develop network architecture standards, patterns and best practices for cloud and hybrid environments.
Design multi‑region and multi‑cloud network architectures for global connectivity and disaster recovery.
On-Premises Network Integration:
Design and implement connectivity between on‑premises networks and Azure cloud infrastructure.
Configure and maintain BGP peering between on‑premises routers and Azure Route Server/ExpressRoute.
Integrate on‑premises network security policies with cloud security controls and migrate services to cloud‑native equivalents.
Network Automation & DevOps:
Develop Infrastructure as Code templates (Terraform, ARM, Bicep) for network provisioning and build CI/CD pipelines using Azure DevOps or GitHub Actions.
Automate network configuration, monitoring and troubleshooting using PowerShell, Azure CLI, Python and Ansible.
Implement GitOps practices, create self‑service network provisioning portals/APIs, and develop automated testing and remediation frameworks.
Security & Compliance:
Design and implement network security architectures including segmentation, micro‑segmentation and Zero Trust principles.
Configure Azure Firewall, NSGs, ASGs and route tables for defense‑in‑depth and implement encryption for transit and remote access solutions.
Perform network security assessments and ensure compliance with regulatory requirements and security standards.
Monitoring & Operations:
Implement comprehensive network monitoring using Azure Monitor, Log Analytics and Network Watcher with flow logging and alerting.
Develop runbooks, automated remediation workflows, capacity planning and maintain CMDB and network documentation.
Collaboration & Leadership:
Lead architecture reviews, provide technical guidance, mentor junior engineers and collaborate with cloud, security and application teams.
Interface with vendors and service providers and present architecture proposals to stakeholders.
Strategic Initiatives:
Drive network modernization and cloud migration initiatives, evaluate emerging technologies and develop network automation roadmaps.
Requirements
Mandatory
Azure Virtual Network (VNet) design and implementation
Azure ExpressRoute configuration and optimization
Azure VPN Gateway and Site-to-Site/Point-to-Point VPN
Azure Load Balancer (ALB/NLB) and Application Gateway
Azure Traffic Manager and Front Door
Azure Firewall and Network Virtual Appliances (NVAs)
Azure Private Link and Private Endpoint
Azure Virtual WAN and SD-WAN integration
Azure Network Watcher and monitoring
Azure DDoS Protection and network security
Hub-and-spoke network topology design
Azure Route Server and BGP configuration
Enterprise routing protocols (BGP, OSPF, EIGRP)
Switching technologies (VLAN, VXLAN, STP, HSRP/VRRP)
MPLS and WAN technologies
Software-Defined Networking (SDN) and SD-WAN
Network security (firewalls, IDS/IPS, VPN concentrators)
Load balancers (F5, Citrix ADC, HAProxy)
Wireless networking (Aruba, Cisco, Ruckus)
Data center networking (Cisco Nexus, Arista, Juniper)
Infrastructure as Code (Terraform, ARM Templates, Bicep)
Azure DevOps and GitHub Actions for network CI/CD
PowerShell and Azure CLI scripting
Python for network automation
Ansible for network configuration management
Git version control and GitOps practices
Configuration management and policy as code
Hybrid cloud connectivity patterns
Multi-cloud network architecture (Azure, AWS, GCP)
Cloud interconnection and peering
DNS and traffic management across environments
Disaster recovery and business continuity networking
Nice-to-have
Network function virtualization (NFV)
Service mesh architectures (Istio, Linkerd)
Container networking (CNI, Calico, Cilium)
Kubernetes networking concepts
Zero Trust Network Architecture (ZTNA)
SASE (Secure Access Service Edge) solutions
Azure Security Center and Azure Sentinel
Network segmentation and micro-segmentation
Cloud security posture management (CSPM)
Compliance frameworks (ISO 27001, SOC 2, PCI-DSS, HIPAA)
Azure Monitor and Log Analytics
Network performance monitoring tools
SNMP and flow-based monitoring (NetFlow, sFlow)
Prometheus and Grafana for network metrics
Cisco ACI and SD-Access
VMware NSX and network virtualization
BGP EVPN and VXLAN implementations
API gateway and service mesh technologies
Originally posted on Himalayas