Lead Architect in Pune, भारत

We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website.

About TMF Group

TMF Group is a leading global provider of high-value business services to clients operating and investing globally. We focus on providing specialized and business-critical financial and administrative services that enable our clients to operate their corporate structures, finance vehicles and investment funds in different geographical locations.

TMF India is a Great Place to Work, ISO & ISAE certified organization.

Discover the Role

The Cloud, Infrastructure, and Cybersecurity Architect plays a strategic role in shaping TMF Group’s hybrid technology landscape. This position is responsible for designing, governing, and securing enterprise‑grade architectures across on‑premises environments, Microsoft Azure, and cloud‑based platforms. The architect ensures all solutions are scalable, resilient, secure, and aligned with TMF’s global transformation roadmap. This role is central to modernising infrastructure, embedding Zero Trust principles, ensuring cybersecurity compliance, and enabling seamless integration across cloud and on‑premises systems.

Key Responsibilities

Architecture Design & Governance

• Lead the design of secure, end‑to‑end cloud and infrastructure architectures for BAU operations, strategic programs, and M&A initiatives.
• Produce architectural documentation including blueprints, reference architectures, HLDs, LLDs, and multi‑year technology roadmaps.
• Ensure all designs meet requirements across business, application, data, infrastructure, and cybersecurity domains.
• Govern adherence to TMF architecture standards, cybersecurity policies, regulatory requirements, and best practices.
• Facilitate design assurance, architecture reviews, and risk assessments throughout the project lifecycle.

Cloud & Hybrid Infrastructure

• Architect and manage hybrid environments spanning Azure cloud and Microsoft HCI‑based data centres.
• Design secure virtual networks, connectivity models, segmentation strategies, and hybrid connectivity between on‑prem and cloud.
• Architect IaaS, PaaS, and SaaS deployments using automation, Infrastructure‑as‑Code, and DevSecOps practices.

Cybersecurity & Zero Trust

• Embed Zero Trust and security‑by‑design principles across identity, network, application, and data layers.
• Collaborate with cybersecurity teams on threat modelling, vulnerability management, incident readiness, and security tool integration (SIEM, SOC platforms).
• Ensure logging, monitoring, encryption, access controls, and security baselines are consistently applied.

Engineering Leadership & Collaboration

• Work closely with third‑party vendors and service providers to ensure solutions are aligned with approved architectures.
• Provide technical leadership and influence across global teams and stakeholders.
• Document architectural decisions, technical trade‑offs, risks, and mitigation plans.

Key Requirements

Experience & Qualifications

• 15+ years of IT experience with strong specialization in cloud, infrastructure, and cybersecurity architecture.
• Expert‑level knowledge of Microsoft Azure and Microsoft cloud ecosystem (M365, D365, Power Platform).
• Strong background in hybrid cloud architectures, distributed systems, and enterprise network technologies.
• Experience working in regulated environments with a focus on secure and compliant solution designs.
• Exposure to AWS cloud services (advantage).
• Strong understanding of ITIL‑based service management and governance practices.
• Experience managing outsourced service providers and technology partners.

Technical Skills

• Deep expertise in cloud, infrastructure, automation, and cybersecurity engineering.
• Strong hands‑on experience with Azure architecture, IaaS/PaaS/SaaS, and secure design patterns.
• Expertise in IAM, Azure AD, conditional access, and privileged access models.
• Strong understanding of cloud security: network security, encryption, key management, monitoring, logging.
• Experience with Zero Trust architectures and secure hybrid connectivity models.
• Proficiency with scripting, automation, orchestration, IaC tools, Git, and Azure DevOps.
• Familiarity with SIEM/SOAR platforms, vulnerability management, endpoint security, and monitoring tools.
• Strong troubleshooting ability across cloud, infrastructure, and security layers.

Competencies & Soft Skills

• Excellent verbal and written communication skills; ability to influence stakeholders.
• Strong leadership capability with an ownership mindset.
• Ability to operate in complex, global, and cross‑functional environments.
• Self‑starter, proactive, and able to drive architectural decisions confidently.

What’s in it for you?

Pathways for career development

• Work with colleagues and clients around the world on interesting and challenging work;
• We provide internal career opportunities so you can take your career further within TMF;
• Continuous development is supported through global learning opportunities from the TMF Business Academy.

Making an impact

• You’ll be helping us to make the world a simpler place to do business for our clients;
• Through our corporate social responsibility programme, you’ll also be making a difference in the communities where we work.

A supportive environment

• Strong feedback culture to help build an engaging workplace;
• Our inclusive work environment allows you to work from our offices around the world, as well as from home, helping you find the right work-life balance to perform at your best.

Other Benefits

• Anniversary & Birthday Leave policy
• Be part of One TMF
• Paternity & Adoption leaves
• Salary advance policy
• Work flexibility – Hybrid work model
• Talk about growth opportunities (we invest in talent)
• Well-being initiatives

We’re looking forward to getting to know you!