T&T | Engg - AI& Data | Associate Director | Azure | Mumbai

T&T | Engg - AI& Data | Associate Director | Azure | Mumbai
• Job requisition ID : 106671 
• Location: Bengaluru
• Entity: Deloitte Touche Tohmatsu India LLP 

The Team

Engineering helps empower and drive mission-critical solutions whether we need to modernize existing systems or implement new technology products and platforms. Through innovation, we improve financial performance, accelerate new digital businesses and fuel growth. Learn more about Engineering, AI and Data

Your work profile

1. Enterprise Cloud Architecture Strategy

• Define and govern enterprise-wide cloud architecture standards, blueprints, and reference models.
• Lead multi-year cloud transformation programs across hybrid and multi-cloud environments.
• Establish architectural guardrails aligned with enterprise risk, compliance, and regulatory requirements.
• Drive standardization across business units to reduce fragmentation and technical debt.
• Collaborate with Enterprise Architecture (EA), Security, Risk, and Infrastructure leadership to align cloud strategy with corporate IT roadmap.
• Evaluate vendor platforms and negotiate technical design considerations for large-scale deployments.
• Chair architecture review boards and approve high-impact technical decisions.
• Define cloud operating models (platform engineering, shared services, landing zones).

2. Large-Scale Cloud Networking Architecture

• Architect globally distributed cloud network topologies across multiple regions and business units.
• Design hub-and-spoke, transit gateway, and cloud WAN architectures at enterprise scale.
• Build secure hybrid connectivity between global data centers and cloud providers using redundant VPN, Direct Connect, ExpressRoute, or equivalent.
• Define enterprise network segmentation strategies including micro-segmentation and Zero Trust architecture.
• Architect resilient multi-region failover and disaster recovery network designs.
• Oversee DNS strategy including private DNS, global traffic management, and split-horizon architecture.
• Standardize network security boundaries including firewalls, WAFs, IDS/IPS integrations.
• Optimize network cost, routing efficiency, and global traffic engineering.
• Provide escalation support for critical P1 enterprise network incidents.

3. Enterprise Kubernetes Platform Architecture

• Architect and govern centralized Kubernetes platforms supporting thousands of workloads.
• Design multi-cluster and multi-region container platforms across environments (dev, test, prod, regulated).
• Build standardized Kubernetes landing zones and platform templates for internal product teams.
• Define namespace isolation, multi-tenancy strategies, and cluster governance policies.
• Architect advanced Kubernetes networking using CNI solutions, service mesh (Istio/Linkerd), and ingress control frameworks.
• Establish secure container supply chain practices (image signing, scanning, registry governance).
• Define autoscaling, resilience, and capacity planning models for enterprise-grade workload variability.
• Oversee GitOps adoption and declarative infrastructure practices across engineering teams.
• Integrate Kubernetes with enterprise IAM, logging, monitoring, and SIEM platforms.

4. Security, Risk & Regulatory Alignment

• Embed security-by-design principles into all cloud and Kubernetes architectures.
• Architect identity federation strategies integrating enterprise IAM and SSO systems.
• Define encryption standards, key lifecycle management, and secrets management policies.
• Ensure compliance alignment with global frameworks (SOC2, ISO 27001, PCI-DSS, HIPAA where applicable).
• Collaborate with internal audit and cybersecurity teams during compliance assessments.
• Conduct threat modeling and architecture risk assessments.
• Enforce policy-as-code and compliance automation.

5. Infrastructure as Code & Platform Automation Governance

• Define enterprise IaC standards and modular architecture frameworks using Terraform or equivalent.
• Establish reusable landing zone blueprints for consistent environment provisioning.
• Govern CI/CD and DevOps platform integrations across multiple teams.
• Implement automated compliance validation and policy enforcement pipelines.
• Drive adoption of immutable infrastructure patterns.
• Oversee versioning, state management, and secure artifact repositories.

6. Observability, Resilience & Operational Excellence

• Architect enterprise-wide observability frameworks (metrics, logging, tracing).
• Define SLO/SLA governance models and reliability standards.
• Design multi-region disaster recovery architectures with defined RTO/RPO targets.
• Lead post-incident architectural reviews and systemic reliability improvements.
• Implement cost governance strategies aligned with FinOps best practices.
• Define capacity forecasting and scalability roadmaps.

7. Leadership & Organizational Influence

• Act as a technical authority across infrastructure, networking, and platform engineering.
• Mentor senior engineers and architects.
• Provide executive-level architecture briefings and strategic recommendations.
• Influence cross-functional technology decisions at CIO/CTO level.
• Lead architectural transformation initiatives across multiple global teams.
• Drive cultural adoption of cloud-native and DevSecOps practices.

Cloud & Platform Expertise

• ++ years in infrastructure/networking with 5+ years in cloud architecture roles.
• Deep expertise in at least one hyperscaler (AWS/Azure/GCP) with enterprise-scale deployments.
• Proven experience designing landing zones and multi-account governance models.
• Strong knowledge of hybrid cloud architectures and legacy modernization.

Advanced Networking Expertise

• Expert-level knowledge of:
• TCP/IP stack
• BGP and dynamic routing protocols
• DNS architecture (internal/external/global)
• NAT, firewalls, proxy architectures
• Experience designing global WAN integrations and SD-WAN connectivity.
• Hands-on expertise with large-scale VPC/VNet architectures.
• Experience implementing Zero Trust and micro-segmentation models.
• Ability to troubleshoot complex packet flow and latency issues in distributed systems.

Kubernetes & Container Architecture

• Deep knowledge of Kubernetes internals and control plane components.
• Experience managing large-scale clusters (hundreds to thousands of nodes).
• Strong understanding of:
• CNI architecture
• Service mesh patterns
• Multi-tenant cluster design
• Secure namespace isolation
• Experience implementing GitOps models at enterprise scale.
• Container runtime security and compliance integration.

Security & Compliance Depth

• Strong understanding of IAM federation, SSO, RBAC, and least privilege models.
• Knowledge of enterprise-grade secrets management.
• Experience integrating with SIEM and security monitoring platforms.

  Key skills required: 

• Education:BE/Btech-IT/CS

• Infrastructure as Code & DevOps Governance

• Advanced Terraform design (modules, remote backends, state isolation).
• Experience establishing IaC governance frameworks.
• Strong understanding of CI/CD automation patterns at enterprise scale.
• Knowledge of policy-as-code frameworks (OPA, Sentinel).

• Enterprise Architecture & Strategy

• Experience working within TOGAF or equivalent enterprise architecture frameworks.
• Ability to translate business strategy into technical architecture.
• Strong documentation and architecture diagramming skills.
• Proven ability to lead cross-functional transformation programs.

• Executive-Level Soft Skills

• Strong stakeholder management across global teams.
• Experience presenting to senior leadership.
• Strategic thinking with risk-aware decision making.
• Ability to balance innovation with compliance and operational stability.