Come join us

Technology only creates value when people embrace it. As part of Avanade's Organizational Change Management team, you will help some of the world's leading organizations successfully adopt new ways of working, from AI and Microsoft Copilot to broader digital transformation initiatives.

You'll join a collaborative and supportive team of change practitioners who are passionate about people, technology and transformation. We combine hands-on client work with a strong focus on learning, knowledge sharing and having fun together as a team.

What you'll do

• Support the design and delivery of change management strategies, activities and deliverables
• Conduct stakeholder and change impact assessments
• Develop communication, training and adoption materials
• Facilitate workshops, training sessions and stakeholder engagement activities
• Support digital transformation, Microsoft 365, Copilot and AI adoption initiatives

Example project you could work on

• Supporting a global organization with the adoption of Microsoft 365 Copilot and AI
• Designing communications and training for a workplace transformation programme
• Facilitating stakeholder workshops to understand change impacts across the organization
• Helping leaders and employees successfully navigate business and technology transformation

Azure Senior Technical Lead — Landing Zone, Terraform & Migration

Practice

Cloud & Infrastructure, Avanade India

Location

Bengaluru/Gurugram, India (Hybrid)

Experience

10–12 years overall in cloud infrastructure and platform engineering, with deep hands-on experience designing and provisioning Azure services through Terraform, building enterprise landing zones from scratch, delivering workload migrations, and leading a small engineering team

Role Summary

Avanade India’s Cloud & Infrastructure practice is looking for an Azure Senior Technical Lead to design and build enterprise Azure platforms for our clients. This is a hands-on technical leadership role for a seasoned Azure specialist — someone who designs the landing zone from scratch and then writes the Terraform that provisions it, rather than handing the design over to someone else.

You will lead platform workstreams end to end: target-state design, landing zone build, workload migration to Azure, and the security, governance and operational guardrails that make the platform safe to run at scale. You will lead a team of two to four engineers, own the technical quality of what they deliver, and act as the client-facing technical authority on the engagement.

Key Responsibilities

• Design enterprise Azure landing zones from the ground up, aligned to the Microsoft Cloud Adoption Framework and Well-Architected Framework — management group hierarchy, subscription and environment strategy, networking, identity, security, governance and operations.

• Design and provision Azure services hands-on using Terraform — authoring, structuring and maintaining modules, root configurations, remote state and provider configuration to a production standard.

• Lead a team of two to four engineers through the landing zone build — allocating work, reviewing code and designs, unblocking the team and owning the quality of what is delivered.

• Lead workload migration to Azure — discovery and assessment, wave planning, migration design (rehost, replatform, refactor), execution, cutover, rollback and post-migration optimisation.

• Design and configure core platform services: hub-and-spoke or Virtual WAN networking, hybrid connectivity (ExpressRoute/VPN), private DNS, Azure Firewall, routing, private endpoints, compute, storage and backup.

• Design identity and access for the platform — Entra ID integration, RBAC model, managed and workload identities, and privileged access.

• Define and implement platform governance — Azure Policy, initiatives and guardrails, management group structure, subscription vending, naming and tagging standards, and cost management.

• Establish security and operations baselines: Defender for Cloud, Key Vault and secrets management, backup and DR patterns, monitoring and alerting, and Azure Monitor/Log Analytics design.

• Own the DevOps set-up required to deliver the landing zone — repository and branching strategy, CI/CD pipelines for Terraform in Azure DevOps or GitHub Actions, plan/apply gating, approvals, secrets handling and drift detection.

• Set and enforce engineering standards — module design and versioning, repo structure, code review discipline, validation and security scanning (tflint, Checkov/tfsec or equivalent).

• Act as design authority on the engagement — chairing design reviews, resolving architecture escalations, reviewing the client architect’s design and pushing back where it is incomplete.

• Carry knowledge transfer to the client’s own team, and mentor and uplift Avanade engineers on the platform.

• Support presales and pursuits as the platform SME: solution architecture, effort estimation, migration approach, delivery plans and client-facing technical workshops.

• Contribute reusable Terraform modules, reference architectures and accelerators to the practice IP library.

Required Skills & Experience

• 10–12 years of overall experience in cloud infrastructure, platform engineering or infrastructure architecture, with a substantial recent focus on Microsoft Azure.

• Proven experience designing and building enterprise Azure landing zones end to end — designing the platform, not just consuming one someone else built.

• Deep hands-on expertise with Terraform — writing and structuring reusable modules, managing state at scale, handling providers and dependencies, and running Terraform in automated pipelines.

• Strong breadth across Azure configuration and operations: compute, networking, storage, databases, backup, monitoring, and the platform services that migrated workloads depend on.

• Strong Azure networking depth: hub-and-spoke and Virtual WAN topologies, ExpressRoute and VPN, NSGs/UDRs, Azure Firewall, Private Link and Private Endpoints, DNS design.

• Solid grounding in Azure identity, security and governance: Entra ID, RBAC, managed identities, Key Vault, Azure Policy, Defender for Cloud, and enterprise compliance requirements.

• Proven delivery of workload migrations to Azure at enterprise scale — assessment, wave planning, execution and cutover — from on-premises datacentres or other cloud providers.

• Hands-on DevOps capability for infrastructure delivery — Azure DevOps Pipelines or GitHub Actions, Git workflows, code review discipline and pipeline-driven deployment.

• Scripting capability in PowerShell and/or Python for automation, tooling and operational tasks.

• Demonstrated experience leading a small engineering team — allocating work, reviewing code and designs, and holding technical quality on medium-to-large engagements.

• Strong client-facing communication skills, including the ability to defend architecture decisions with senior client stakeholders and architecture review boards.