IT Infrastructure Architect - M365, GCP, Azure

Job description

**Job Title: Infrastructure Consultant (M365, Azure, GCP & Windows)** **Function:** Digital & Information Office (DIO) Infrastructure & Operations **Team:** Solution Design & End User Services **Reporting to:** Director, Infrastructure & Operations (Solution Design & EUS) **Location:** Gurgaon/India **Role Purpose – Cloud, Workplace, Automation & Platform Architecture Leadership** The **Senior Infrastructure Consultant** is a **senior handson design authority** responsible for leading **solution design across Microsoft 365, Azure, Google Cloud Platform (GCP), and the Windows platform estate**, with **securitybydesign, automation, and optimisation embedded as nonnegotiable principles**. The role exists to materially improve **service quality, speed of delivery, and cost efficiency** by driving **standardisation, automationfirst design, and platform optimisation**. Architectures are expected to be **secure, resilient, operable, and industrialised**, reducing manual effort and enabling Infrastructure Operations teams to deliver at scale. Operating within the **Solution Design team**, the role defines **targetstate architectures, standards, reference designs, and multiyear roadmaps**, and produces **highquality, endtoend solution designs** that accelerate delivery while lowering operational cost and risk. This is a **senior, credible technical leader** role, expected to be the **goto authority** for modern workplace, cloud platform, and infrastructure automation design across the organisation. **Core Architecture & Design Scope** The role owns architecture and detailed design across the following priority domains: **Microsoft 365 & Modern Workplace** - Architecture and design ownership for **Microsoft 365** services including **Exchange Online, SharePoint Online, OneDrive, Teams, and Intune** - **Joint design responsibility with the Security function for Entra ID (Azure AD), Microsoft Purview, and Microsoft Defender**, encompassing **identity and access management architecture, identity governance and privileged access models, data protection, compliance and threat control design, access control models, policy enforcement, logging, and auditability** - Designing **securebydesign, automatable modern workplace architectures** that minimise manual operations - Defining patterns for **identity lifecycle automation, device provisioning, policy enforcement, compliance controls, and selfservice** **Azure Cloud Platform** - Architecture and detailed solution design across **Azure landing zones**, subscriptions, identity integration, networking, security, monitoring, and platform services - Designing **automationfirst Azure architectures**, including **InfrastructureasCode (IaC), standard pipelines, and policyascode** - Embedding **securitybydesign and cost optimisation** into landing zones, networking, logging, and control frameworks - Enabling **faster and repeatable environment delivery** through standardised designs - Designing for **secure hybrid integration** with onprem platforms and other cloud environments **Google Cloud Platform (GCP)** - Solution design and architectural governance for **GCP workloads and platform services** where used across the estate - Ensuring **consistent automation, security, logging, monitoring, and operational controls** across Azure and GCP - Driving **cloudagnostic design patterns** that balance platform optimisation with operational simplicity **Windows & Core Platform Services** - Architecture leadership for **Windows Server and Windows client platforms**, including build standards, lifecycle, hardening, and automation - Designing **securebydefault, automated Windows builds**, gold images, patching, vulnerability management, and monitoring patterns - Reducing operational effort through **standardisation, automation, and simplified platform designs** - Strong alignment between **Windows, identity, M365, endpoint management, and security tooling** designs **Crosscutting Platform & Design Responsibilities** - **Securitybydesign across all platforms**, including identity flows, interface security, and data protection - **Automation and orchestration by default**, replacing manual and ticketdriven processes - Platform observability, monitoring, logging, and operability patterns - Backup, recovery, disaster recovery, and **cyberresilience by design** - Clear ownership of **interfaces, integrations, and data flows** across all designs **Key Accountabilities** **1. Senior Solution Design Authority** - Act as the **lead design authority** for M365, Azure, GCP, and Windows architectures - Own **targetstate architectures, principles, standards, and reference designs**, explicitly optimised for automation and scale - Produce and govern **highquality endtoend solution designs** covering build, run, security, recovery, and automation **2. Security, Resilience, Automation & Operability by Design** - Embed **securitybydesign, Zero Trust principles, automation, resilience, recoverability, and auditability** into all architectures - Ensure solutions are **highly automatable, operable at scale, and costefficient** - Work in close partnership with **Security and Operations teams** to balance control with delivery speed **3. Platform Optimisation & Efficiency** - Drive architectural decisions that **reduce operating cost, manual effort, and timetodeliver** - Simplify platforms through **standardisation, consolidation, and automationled design** - Eliminate technical debt and architectural patterns that increase operational friction or cost **4. Platform Strategy & Roadmaps** - Define and maintain **multiyear architecture roadmaps** aligned to service improvement, automation, and cost efficiency - Translate strategy into **investable initiatives** with measurable operational and financial benefit **5. Collaboration & Technical Leadership** - Work closely with **Enterprise Architecture, Security, Engineering, and Operations teams** - Resolve cros