YASH Technologies
Website:
yash.com
Job details:
YASH Technologies is a leading technology integrator specializing in helping clients reimagine operating models, enhance competitiveness, optimize costs, foster exceptional stakeholder experiences, and drive business transformation.
At YASH, we’re a cluster of the brightest stars working with cutting-edge technologies. Our purpose is anchored in a single truth – bringing real positive changes in an increasingly virtual world and it drives us beyond generational gaps and disruptions of the future.
We are looking forward to hire Azure Cloud Professionals in the following areas :
Job Description
Experience required: 5+ years.
Job Summary
We are looking for a Senior solution architecht, Azure Cloud to own and drive enterprise Azure infrastructure with a strong focus on architecture, resilience, security and compliance and alignment with Microsoft Well-Architected Framework and industry best practices. The ideal candidate brings 6–9 years of deep relavant Azure experience and has a track record of building well-governed, secure, and optimized cloud environments. This role requires someone who doesn’t just build infrastructure but continuously evaluates, hardens, and improves it.
Essential Duties And Responsibilities
- Architecture & Strategy
- Well-Architected Framework + Cloud Adoption Framework (CAF)
- Enterprise-Scale Landing Zones (MG hierarchy, subscription vending)
- Multi-region BCDR design (RTO/RPO, paired regions)
- Architecture Decision Records (ADRs) and design documentation
- Identity (Entra ID)
- Conditional Access (Zero Trust, risk-based)
- PIM, RBAC at scale, access reviews
- Hybrid identity (Entra Connect), B2B/B2C
- Managed identities + Workload Identity for AKS
- Networking
- Hub-spoke / Virtual WAN topologies
- Front Door, App Gateway, WAF, Azure Firewall
- ExpressRoute, VPN, Private Endpoints
- DDoS, Network Watcher, NSG flow logs
- DNS
- Azure Private DNS zones + Private Resolver
- Conditional forwarding, zone links (registration vs resolution)
- Split-horizon / hybrid name resolution
- Certificates & Secrets
- Key Vault — lifecycle, auto-rotation
- Internal CA integration, Managed HSM
- Secret rotation patterns for apps
- Compute & Containers
- AKS — networking modes, Workload Identity, ingress, upgrades
- VMs, VMSS, Bastion, Update Management
- App Service (slots, scaling), Azure Functions
- Container Apps, ACR (geo-replication)
- Integration & PaaS
- API Management (policies, products, versioning)
- Service Bus, Event Grid, Event Hubs
- Logic Apps (Standard / Consumption)
- Data
- Azure SQL / SQL MI, Cosmos DB
- PostgreSQL / MySQL Flexible Server
- Storage (Blob lifecycle, Files, NetApp), replication strategies
- AI & Analytics
- Azure OpenAI / AI Foundry with private endpoints
- RAG patterns, content safety
- AI Search; Synapse / Fabric if in scope
- Security & Compliance
- Defender for Cloud (CSPM/CWPP)
- Microsoft Sentinel (SIEM/SOAR)
- Azure Policy + initiatives, CIS/NIST compliance
- Observability
- Azure Monitor, Log Analytics, App Insights
- KQL for analysis, action groups, auto-remediation
- Azure Resource Graph for inventory
- Cost & FinOps
- Rightsizing, RI / Savings Plans
- Tagging, budgets, anomaly alerts
- FinOps practice (Inform → Optimize → Operate)
- BCDR
- Azure Site Recovery, immutable backups
- Geo-replication for SQL / Cosmos / Storage
- Regional failover runbooks and DR drills
- Hybrid & Migration
- Azure Arc (servers, K8s, data)
- Azure Migrate, DMS
- 6 R's — rehost / refactor / replatform / rearchitect
- IaC & DevOps
- Terraform + Bicep
- YAML pipelines (Azure DevOps / GitHub Actions)
- Policy-as-Code, security scanning (Checkov / tfsec)
- Automation
- PowerShell + Python (Azure SDK)
- Azure Automation (runbooks, hybrid worker)
- Event-driven via Functions / Logic Apps
Additional Responsibilities
Education
- Bachelor's Degree Computer Science required or
- Bachelor's Degree Information System required
Work Experience
- Minimum 5+ years of relevant Azure cloud administration experience.
Preferred Knowledge, Skills And Abilities
- Strong working knowledge of Cloud Adoption Framework and Well-Architected Framework, applied to design reviews and remediation
- Hands-on proficiency with Python, PowerShell, and Azure CLI for administration, identity management, and automation
- Deep understanding of Entra ID — authentication flows, token lifecycle, Conditional Access evaluation, directory synchronization
- Solid grasp of PKI — certificate chains, TLS handshake, formats (PFX, PEM, CER), and lifecycle management
- Experience designing DNS resolution strategies across hybrid environments (private zones, conditional forwarding, split-horizon)
- Working knowledge of hybrid Azure networking — hub-spoke topologies, ExpressRoute / VPN, Private Endpoints, NSG and routing fundamentals
- Proficiency in Infrastructure-as-Code — Terraform and/or Bicep, including module design and policy-as-code
- Baseline understanding of container platforms (AKS) — networking modes, ingress, workload identity
- Ability to translate Advisor, Defender for Cloud, and Cost Management insights into actionable optimization, security, and FinOps plans
- Strong communication skills — articulating technical trade-offs and driving consensus across engineering and leadership audiences
License and Certifications
- Desirable AZ-305 — Azure Solutions Architect Expert or other relvant
At YASH, you are empowered to create a career that will take you to where you want to go while working in an inclusive team environment. We leverage career-oriented skilling models and optimize our collective intelligence aided with technology for continuous learning, unlearning, and relearning at a rapid pace and scale.
Our Hyperlearning workplace is grounded upon four principles
- Flexible work arrangements, Free spirit, and emotional positivity
- Agile self-determination, trust, transparency, and open collaboration
- All Support needed for the realization of business goals,
- Stable employment with a great atmosphere and ethical corporate culture
Click on Apply to know more.
