Cloud Architect

Defining and evolving the target architecture for Azure, including design, network, identity concepts, and Azure Landing Zones

Implementing Adoption Framework and Well-Architected Framework

Establishing IaC standards with Terraform, designing GitOps and CI/CD architectures, and enabling development teams through self-service platform approaches

Integrating security-by-design and compliance requirements from the start, covering IAM, network segmentation, and secrets management, and supporting audits and security reviews together with InfoSec and Compliance

Planning and accompanying migrations from on-premise or legacy systems into Azure, evaluating workloads for cloud-readiness, and applying cost-by-design principles to keep cloud spend transparent and efficient

Reviewing and evaluating existing and new cloud concepts, contributing to architecture governance, creating and maintaining architecture documentation, and actively transferring knowledge to teams and stakeholders

Extensive experience in designing and implementing Azure cloud architectures at scale, including multi-subscription, hub-spoke networking, and identity concepts.

Strong proficiency in Terraform and practical knowledge of IaC standards, GitOps, and CI/CD pipeline design in a DevOps environment.

Deep understanding of cloud security principles such as IAM, network segmentation, secrets management, and Entra ID, along with experience collaborating with compliance and security engineering teams.

Effective communicator capable of facilitating architecture decisions across development teams, management, and cross-functional stakeholders.

Experience in e-commerce or other high-traffic platforms, particularly in architecting for Black Friday peaks and ensuring mission-critical uptime.

Hands-on FinOps expertise including cost modeling, capacity planning, and integrating cost visibility into architecture practices.

Exposure to AI/ML services on Azure and a keen interest in how AI impacts future platform and product architectures.

Relevant Microsoft certifications including Azure Solutions Architect Expert (AZ-305), Azure Security Engineer Associate (AZ500), Azure Developer Associate (AZ-204), Azure Fundamentals (AZ-900), and Azure Network Engineer Associate (AZ-700).

Familiarity with Kubernetes and Docker.

The position offers a competitive salary and benefits package

Employees are eligible for a year-end bonus equivalent to an extra month's salary

Generous annual leave of up to 18 days

Additional premium health insurance coverage

Access to complimentary gourmet coffee, beverages, snacks, and fresh fruits

1-on-1 coaching is available with experienced professionals

Flexible work policy with accommodating hours

Dynamic, fun, and agile environment conducive to sharing and creativity

Colleagues are described as open-minded, kind, and humble

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666