Enterprise Cloud Architect | Azure | Mumbai | Engineering | Hybrid Cloud Engineering

Job description

Job requisition ID :: 106671 Date: Jun 23, 2026 Location: Bengaluru Designation: Associate Director Entity: Deloitte Touche Tohmatsu India LLP **Associate Director | Azure | Mumbai | Engineering | Hybrid Cloud Engineering** - **Job requisition ID** : 106671 - **Location**: Bengaluru - **Entity**: Deloitte Touche Tohmatsu India LLP **Associate Vice President - Delivery | Engineering, AI & Data - Engineering** **| Azure Cloud Architect** - **Location:** Bengaluru/Mumbai **The team** Engineering helps empower and drive mission-critical solutions whether we need to modernize existing systems or implement new technology products and platforms. Through innovation, we improve financial performance, accelerate new digital businesses and fuel growth. Learn more about Engineering, AI and Data **Your work profile** **1. Enterprise Cloud Architecture Strategy** - Define and govern enterprise-wide cloud architecture standards, blueprints, and reference models. - Lead multi-year cloud transformation programs across hybrid and multi-cloud environments. - Establish architectural guardrails aligned with enterprise risk, compliance, and regulatory requirements. - Drive standardization across business units to reduce fragmentation and technical debt. - Collaborate with Enterprise Architecture (EA), Security, Risk, and Infrastructure leadership to align cloud strategy with corporate IT roadmap. - Evaluate vendor platforms and negotiate technical design considerations for large-scale deployments. - Chair architecture review boards and approve high-impact technical decisions. - Define cloud operating models (platform engineering, shared services, landing zones). **2. Large-Scale Cloud Networking Architecture** - Architect globally distributed cloud network topologies across multiple regions and business units. - Design hub-and-spoke, transit gateway, and cloud WAN architectures at enterprise scale. - Build secure hybrid connectivity between global data centers and cloud providers using redundant VPN, Direct Connect, ExpressRoute, or equivalent. - Define enterprise network segmentation strategies including micro-segmentation and Zero Trust architecture. - Architect resilient multi-region failover and disaster recovery network designs. - Oversee DNS strategy including private DNS, global traffic management, and split-horizon architecture. - Standardize network security boundaries including firewalls, WAFs, IDS/IPS integrations. - Optimize network cost, routing efficiency, and global traffic engineering. - Provide escalation support for critical P1 enterprise network incidents. **3. Enterprise Kubernetes Platform Architecture** - Architect and govern centralized Kubernetes platforms supporting thousands of workloads. - Design multi-cluster and multi-region container platforms across environments (dev, test, prod, regulated). - Build standardized Kubernetes landing zones and platform templates for internal product teams. - Define namespace isolation, multi-tenancy strategies, and cluster governance policies. - Architect advanced Kubernetes networking using CNI solutions, service mesh (Istio/Linkerd), and ingress control frameworks. - Establish secure container supply chain practices (image signing, scanning, registry governance). - Define autoscaling, resilience, and capacity planning models for enterprise-grade workload variability. - Oversee GitOps adoption and declarative infrastructure practices across engineering teams. - Integrate Kubernetes with enterprise IAM, logging, monitoring, and SIEM platforms. **4. Security, Risk & Regulatory Alignment** - Embed security-by-design principles into all cloud and Kubernetes architectures. - Architect identity federation strategies integrating enterprise IAM and SSO systems. - Define encryption standards, key lifecycle management, and secrets management policies. - Ensure compliance alignment with global frameworks (SOC2, ISO 27001, PCI-DSS, HIPAA where applicable). - Collaborate with internal audit and cybersecurity teams during compliance assessments. - Conduct threat modeling and architecture risk assessments. - Enforce policy-as-code and compliance automation. **5. Infrastructure as Code & Platform Automation Governance** - Define enterprise IaC standards and modular architecture frameworks using Terraform or equivalent. - Establish reusable landing zone blueprints for consistent environment provisioning. - Govern CI/CD and DevOps platform integrations across multiple teams. - Implement automated compliance validation and policy enforcement pipelines. - Drive adoption of immutable infrastructure patterns. - Oversee versioning, state management, and secure artifact repositories. **6. Observability, Resilience & Operational Excellence** - Architect enterprise-wide observability frameworks (metrics, logging, tracing). - Define SLO/SLA governance models and reliability standards. - Design multi-region disaster recovery architectures with defined RTO/RPO targets. - Lead post-incident architectural reviews and systemic reliability improvements. - Implement cost governance strategies aligned with FinOps best practices. - Define capacity forecasting and scalability roadmaps. **7. Leadership & Organizational Influence** - Act as a technical authority across infrastructure, networking, and platform engineering. - Mentor senior engineers and architects. - Provide executive-level architecture briefings and strategic recommendations. - Influence cross-functional technology decisions at CIO/CTO level. - Lead architectural transformation initiatives across multiple global teams. - Drive cultural adoption of cloud-native and DevSecOps practices. **Cloud & Platform Expertise** - ++ years in infrastructure/networking with 5+ years in cloud architecture roles. - Deep expertise in at least one hyperscaler (AWS/Azure/GCP) with enterprise-scale deployments. - Proven experience designing landing zones and multi-account governance models. - Strong