The posting
## About Minfy
Minfy Technologies is a cloud-native IT services company helping enterprises across India and global markets build, run, and secure mission-critical workloads across hybrid and multi-cloud environments. Our practice spans cloud infrastructure, platform engineering, managed services, DevOps, data engineering, and cybersecurity, underpinned by our Kavach360 security programme (ISO 27001, SOC 2, and DPDP Act alignment).
## The role
The Hybrid Cloud Platform Architect designs and owns the foundational platform that enterprise workloads run on across on-premises, Azure, and a secondary public cloud. You define the landing zones, hybrid connectivity, identity, governance, and self-service tooling that let engineering teams deliver quickly and safely — and you set the standards for reliability, security, and cost that keep the platform healthy at scale. This is a hands-on architecture role: you build reference implementations and Infrastructure-as-Code, not just diagrams, and you mentor the engineers who extend the platform. Azure is the primary environment; you bring working depth in AWS or GCP to design and operate genuinely hybrid, multi-cloud solutions.
## What you'll do
**Platform foundation and landing zones**
- Design and govern enterprise-scale Azure landing zones using the Cloud Adoption Framework and Well-Architected Framework: management-group hierarchy, subscription topology, guardrails, and policy-as-code (Azure Policy).
- Establish the equivalent foundation in the secondary cloud (AWS Control Tower / Organizations or GCP organisation and folder structure) where workloads span providers.
**Hybrid architecture and connectivity**
- Architect hybrid connectivity and network topology: hub-spoke / virtual WAN, ExpressRoute and VPN, DNS, and segmentation across data centre and cloud.
- Extend cloud control planes to on-premises and edge using Azure Arc (and Azure Stack / VMware integration where relevant), enabling consistent governance across hybrid estate.
**Identity, security, and governance**
- Design identity and access with Microsoft Entra ID (federation, Conditional Access, PIM/PAM), least-privilege RBAC, Key Vault, and secrets management.
- Embed security and data protection by design — encryption, network controls, and Defender for Cloud — and align the platform with DPDP, ISO 27001, and SOC 2 obligations.
- Run architecture review and approval, guardrails, and the technical standards that ensure consistency and operational excellence.
**Automation and platform engineering**
- Build reusable Infrastructure-as-Code (Terraform and/or Bicep) modules, CI/CD pipelines, and golden paths that give product teams safe, self-service provisioning.
- Architect container and orchestration platforms (AKS, with EKS / GKE in the secondary cloud) and the surrounding supply-chain and policy controls.
**Reliability, observability, and cost**
- Define HA, DR, and backup architectures to agreed RTO/RPO targets, and design observability (Azure Monitor, Log Analytics, and equivalents) for actionable platform health.
- Lead FinOps practice for the platform: right-sizing, commitment-based discounts (Reserved Instances / Savings Plans / committed use), tagging, and cost visibility and accountability.
**Leadership and consulting**
- Act as technical authority across engagements, partnering with client architecture and infrastructure teams to shape platform strategy and roadmaps.
- Mentor platform and cloud engineers, and contribute to presales, solution workshops, and effort estimation.
## What you'll bring
**Required**
- 10+ years in technology, with 5+ years architecting cloud or hybrid platforms.
- Deep, hands-on Microsoft Azure expertise across networking, identity and security, compute, storage, and HA/DR — at Azure Solutions Architect Expert standard.
- Proven design and ownership of Azure landing zones (CAF), governance with Azure Policy, and Entra ID-based identity and access.
- Strong hybrid experience: ExpressRoute / hybrid networking, Azure Arc, and integration with on-premises or VMware environments.
- Infrastructure-as-Code with Terraform and/or Bicep, plus CI/CD; container orchestration with Kubernetes (AKS).
- Working knowledge of either AWS or GCP sufficient to architect and operate multi-cloud solutions.
- Excellent client-facing communication and the ability to set standards and mentor engineers.
**Preferred**
- Certifications in the secondary cloud (AWS Solutions Architect, GCP Professional Cloud Architect).
- Platform engineering / internal developer platform experience (golden paths, self-service, policy-as-code).
- FinOps certification and experience operating cost governance at scale.
- Observability and SRE practices; experience in a regulated or enterprise delivery environment.
**Certifications (expected)**
- Microsoft Certified: Azure Solutions Architect Expert (required or to be achieved within an agreed timeframe)
- AWS Certified Solutions Architect or Google Professional Cloud Architect (advantageous)
## What success looks like
- Within 90 days: a reference Azure landing zone and IaC baseline adopted on at least one engagement, with review standards in use by the team.
- Within 6–12 months: a repeatable, self-service hybrid platform pattern in production across engagements, measurable cost optimization delivered, and a demonstrable uplift in the engineer's you mentor.
## Why Minfy
You will own the platform foundations that enterprise workloads depend on, with the autonomy of a senior architect, the support of a strong practice, and a clear path to shape how we build hybrid cloud at scale.
