Cloud Architect
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
We are seeking an experienced Azure Cloud Architect and DevOps Engineer to own the cloud end-to-end, from architecture design to operational pipelines. You will manage Azure services, networking, CI/CD, and FinOps, partnering with engineering to ship faster and cheaper.
Key Skills for This Role
Responsibilities
- Own the Azure architecture diagram across the platform and keep it current
- Design changes to topology as the product grows (new container apps, replicas/autoscale rules, search index sharding, queue strategies, multi region considerations)
- Approve major infrastructure changes from engineering
- Define and enforce naming conventions, resource tagging, and resource group structure
- Manage DNS (public domains and internal Azure DNS zones)
- Own Azure Front Door profiles: origins, routes, rules, custom domains, SSL/TLS
- Manage edge CDN provider (e.g., Cloudflare) for public surfaces
- WAF policies: rule tuning, false positive triage, blocking abusive traffic
- Plan and execute domain migrations, certificate renewals, and edge cache strategy
- Own Azure DevOps Pipelines: build/test/release templates, service connections, variable groups, environment approvals, artifact retention
- Container build optimisation (image size, layer cache, build time), ACR retention policies
- Deployment strategies: blue/green via container app revisions, canary rollouts, rollback playbooks
Requirements
- 6+ years in Azure as primary cloud
- Azure services mastery: Container Apps, App Services, Function Apps, ACR, AKS basics, Azure Database for PostgreSQL, Cosmos DB for PostgreSQL, Storage Blob, Service Bus, Key Vault, Application Insights, Log Analytics
- Azure Front Door (Standard + Premium) deep configuration experience
- Edge CDN provider (e.g., Cloudflare) operational experience
- WAF rule design and tuning
- DNS at scale (public, private, split horizon, NS delegation)
- Azure DevOps Pipelines YAML templates, multi stage pipelines, service connections
- Networking fundamentals: VNet, NSG, peering, private endpoints, service endpoints
- Strong scripting: Bash, PowerShell, Python; comfortable with Azure CLI
- IaC: Bicep or Terraform in production
- FinOps practice: has actually saved money in a prior role
Full Job Posting
About the role
- Our entire stack runs on Azure Container Apps, App Services, Function Apps, Azure AI Search, Cosmos DB for PostgreSQL, Azure Database for PostgreSQL, Storage, Service Bus, Front Door plus an edge CDN provider (e.g. Cloudflare) for our public domains.
- We need one person who lives at the intersection of cloud architecture and operational DevOps, owning the cloud end to end and partnering with engineering to ship faster and cheaper.
Architecture
- Own the Azure architecture diagram across the platform and keep it current.
- Design changes to topology as the product grows (new container apps, replicas / autoscale rules, search index sharding, queue strategies, multi region considerations).
- Approve major infrastructure changes from engineering schema migrations on shared DBs, new public endpoints, new secrets in Key Vault, cross service dependencies.
- Define and enforce naming conventions, resource tagging (cost centre, environment, owner), and resource group structure across subscriptions.
Networking & edge
- Manage DNS (public domains and internal Azure DNS zones).
- Own Azure Front Door profiles origins, routes, rules, custom domains, SSL / TLS.
- Manage the edge CDN provider (e.g. Cloudflare) for public surfaces DNS, page rules, caching, purge workflows, security rules.
- Azure Application Gateway where still in play.
- WAF policies rule tuning, false positive triage, blocking abusive traffic without blocking real users.
- Plan and execute domain migrations, certificate renewals, and edge cache strategy.
DevOps & CI/CD
- Own Azure DevOps Pipelines build / test / release templates, service connections, variable groups, environment approvals, artifact retention.
- Container build optimisation (image size, layer cache, build time), ACR retention policies.
- Deployment strategies blue / green via container app revisions, canary rollouts, rollback playbooks.
- Pipeline templates that every engineering team can reuse without copy paste.
- Secret management Key Vault references, rotating credentials, getting secrets out of .env files.
FinOps / cost optimisation
- Continuously audit Azure spend across all subscriptions and bring monthly cost reports to leadership.
- Identify and execute cost cutting moves right sizing container apps, reserving compute where stable, switching tiers, killing zombie resources, reviewing egress / CDN charges.
- Quantify cost versus performance trade offs for any proposed architecture change.
Must have experience
- 6+ years in Azure as primary cloud (not someone who learned it last year).
- Azure services mastery: Container Apps, App Services, Function Apps, ACR, AKS basics, Azure Database for PostgreSQL, Cosmos DB for PostgreSQL (Citus), Storage Blob, Service Bus, Key Vault, Application Insights, Log Analytics.
- Azure Front Door (Standard + Premium) deep configuration experience.
- Edge CDN provider (e.g. Cloudflare) at the operational level zone management, page rules, firewall rules, cache purge, API automation.
- WAF rule design and tuning (Azure FD WAF or equivalent).
- DNS at scale public, private, split horizon, NS delegation.
- Azure DevOps Pipelines YAML templates, multi stage pipelines, service connections (and the permission politics of who can create them).
- Networking fundamentals VNet, NSG, peering, private endpoints, service endpoints.
- Strong scripting: Bash, PowerShell, Python; comfortable with the Azure CLI.
- IaC: Bicep or Terraform (at least one in production), and ARM as a fallback when reading legacy.
- FinOps practice has actually saved money in a prior role, not just read about it.
Nice to have
- Azure certifications (AZ 104 / AZ 305 / AZ 400).
- Multi subscription tenant management with Entra ID (formerly Azure AD).
- Kubernetes (AKS) even if not currently in use.
- SRE practices SLOs, error budgets, on call rotations.
- Observability beyond App Insights Grafana, Datadog, ELK stacks.
- Database operations background (PostgreSQL HA, replication, point in time restore).
- Security background (CIS benchmarks, vulnerability scanning, container scanning).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Confidential
Social Media Manager
Dubai, UAE
A Dubai-based lifestyle and hospitality brand seeks a creative Social Media Manager to lead social media strategy, create engaging content, and drive audience engagement across platforms. Ideal for candidates with 3-5+ y
Costing Engineer
Abu Dhabi Emirate, UAE
A confidential company is seeking an experienced Costing Engineer for road marking projects. The role involves preparing cost estimates, budgets, cost control, productivity analysis, and commercial reporting. Candidates
Junior Accountant
Dubai, UAE
A confidential company in Dubai seeks a Junior Accountant to support daily financial tasks, maintain records, and assist with reporting. The ideal candidate has 0-2 years of experience, strong Excel skills, and a degree
General Manager – IT (Automotive Dealerships)
Jeddah, KSA
A leading automotive dealership group is seeking a General Manager – IT to lead IT strategy, digital transformation, and technology operations. The role requires strong experience with Kerridge DMS and Infor SyteLine ERP
Transaction Monitoring Analyst
Abu Dhabi, UAE
A financial crime function seeks a Transaction Monitoring Analyst to monitor transactions, conduct KYC/EDD, and investigate suspicious activity. Requires 2+ years in AML/financial crime operations and strong analytical s
Executive Assistant
Dubai, UAE
A confidential organization seeks an Executive Assistant to support the Chairman and senior leadership. The role involves managing complex schedules, sensitive communications, VIP engagements, and coordination across mul
Training Manager
Jeddah, KSA
A leading automotive organization in Saudi Arabia seeks a Training Manager to lead learning and development initiatives. You will develop training strategies, conduct needs analysis, manage LMS, and measure effectiveness
Digital Marketing Executive
Dubai, UAE
We are seeking a proactive Digital Marketing Executive with 1-3 years of experience in performance marketing and social media management. You will plan and optimize Google Ads and Meta Ads campaigns, manage social media
Social Media Manager
Dubai, UAE
Costing Engineer
Abu Dhabi Emirate, UAE
Junior Accountant
Dubai, UAE
General Manager – IT (Automotive Dealerships)
Jeddah, KSA
Transaction Monitoring Analyst
Abu Dhabi, UAE
Executive Assistant
Dubai, UAE
Training Manager
Jeddah, KSA
Digital Marketing Executive
Dubai, UAE