Cloud Infrastructure Architect (IaaS, Networking, Security)

Tata Elxsi’s strong domain expertise in Media and Communications, complemented with our experience in delivering vertically industry use cases, enable customers to differentiate and win. We offer integrated services from research and strategy to electronics and mechanical design, software development, validation, and deployment, supported by design studios, global development centers, and offices around the globe. These cover the entire spectrum of the 5G Services, Edge computing services, and subsystems to the connectivity, cloud platform and infrastructure elements.

We are seeking a Principal Architect – Infra/Cloud with 10+ years of experience who can contribute to the success & advancement of our projects through their leadership & expertise.

Role and Responsibilities

• Own the design and development of cloud architecture solutions in AWS or Azure, ensuring alignment with business and covering components like compute, storage, networking, and data services
• Own implementation of network architecture, including VPC (Virtual Private Cloud) design, subnetting, routing, and VPN configurations
• Ensure network connectivity, security, and performance across cloud environments
• Own the design and implementation of a comprehensive security strategy for cloud environments, encompassing identity and access management, data protection, and compliance. Ensure compliance with relevant industry regulations and standards (e.g., GDPR, HIPAA, CIS, NIST)
• Conduct regular security assessments, audits, and vulnerability assessments
• Technical lead in ensuring disaster recovery and business continuity plans for cloud environments. Implement backup, replication, and failover strategies to minimize downtime
• SME in automation tools and scripting (e.g., Terraform, Ansible, PowerShell) to provision and manage cloud resources. Also maximizing implementation of infrastructure as code (IaC) practices
• Auditor for cloud costs Management via monitoring cloud spending and implementing cost management practices, such as budget controls and resource tagging.

Qualifications and Education Requirements

• 10+ years of overall experience working in the software engineering industry with a Bachelor/Master of Engineering, MCA, or similar education
• Professional certification on cloud (AWS/Azure) or at least 4 years’ experience working as an architect
• Professional certification in security or 2+ years of working experience in it is a plus
• Has more than 5 years of experience in designing and deploying OnPrem or cloud platforms and expertise in compute, storage, network, and security aspects

Performance KPIS:

• SRE/Service Assurance Team Establishment: Number of successful SRE/service assurance teams established across projects. This KPI measures the SRE Chief Architect's ability to build and manage high-performing teams that can effectively support the organization's SRE and service assurance needs.
• Technical Solution Delivery: Number of successful technical solutions provided for proposals. This KPI measures the SRE Chief Architect's ability to develop and deliver innovative technical solutions that meet the needs of the organization and its customers.
• Customer Collaboration: Number of consultations provided to customers. This KPI measures the SRE Chief Architect's ability to collaborate with customers to understand their needs and provide guidance.
• SRE Process Improvement: Number of projects sponsored to review and ensure the quality of SRE processes, techniques, and best practices. This KPI measures the SRE Chief Architect's commitment to improving the quality of the organization's SRE practices.
• CoE Creation: Number of Centers of Excellence (CoEs) initiatives created for new service areas.This KPI measures the SRE Chief Architect's ability to launch new service areas and build the necessary expertise to support them.

Preferred Skills

Must Have:

• Expertise in AWS or Azure services, including but not limited to:
  • Compute: EC2, VMs, Lambda, Azure Virtual Machines
  • Storage: S3, Azure Blob Storage, EBS, and Azure Disk Storage
  • Networking: VPC, Subnets, Azure Virtual Network, ExpressRoute, VPN Gateway
  • Databases: RDS, Aurora, SQL Database, Cosmos DB
  • Identity and Access Management (IAM): IAM roles, Azure Active Directory
  • Serverless: AWS Lambda, Azure Functions
  • Containers: Docker, Kubernetes, AWS ECS, Azure Kubernetes Service (AKS)
  • Security: AWS Identity and Access Management (IAM), Azure AD, AWS Key Management Service (KMS), Azure Key Vault
• Experienced in
  • Demonstrated experience in leading production environment incident response by identifying root causes, implementing immediate mitigations, and conducting post-incident reviews (PIRs) to prevent recurrence.
  • Proven ability to identify and resolve performance bottlenecks and optimize resource utilization, including compute, storage, and network, to achieve cost-efficiency while maintaining optimal performance
  • Design and implement effective disaster recovery plans and solutions to ensure business continuity in the event of disruptions, including resolution of issues related to data backup, replication, and failover strategies.
  • Implementation of IAM policies and practices to align with security requirements
  • Experience in integrating cloud services with on-premises systems or third-party applications. Troubleshooting integration issues related to data exchange, API connectivity, and authentication
  • Successful migration of on-premises workloads to the cloud and overcoming challenges related to hybrid cloud environments and data synchronization
  • Identification and resolution of cloud cost overruns by implementing cost-saving measures and optimizing resource usage
  • Implementation of complex automation and orchestration workflows to streamline infrastructure provisioning and management