Azure Cloud Architect || Toronto ON || Fulltime FTE & Contract

Job Title: Azure Cloud Architect
Location: Toronto, ON - Onsite
Employment Type: Full-Time FTE Permanent

Experience: 10+ Years

Job Description

We are looking for an experienced Azure Cloud Architect with strong expertise in enterprise Azure architecture, cloud infrastructure, networking, security, governance, and large-scale cloud migrations. The ideal candidate should have hands-on experience designing Azure landing zones, hybrid connectivity, disaster recovery, and Infrastructure as Code (IaC).

Must-Have Technical Skills

• 10+ years of experience in Infrastructure Engineering or Architecture, including 5+ years of hands-on Azure Architecture experience.

• Strong expertise in Azure Networking, Microsoft Entra ID, Azure Policy, Management Groups, and Security Services.

• Experience designing Azure Landing Zones and large-scale on-premises to Azure migrations.

• Hands-on experience with Terraform and/or Bicep.

• Knowledge of PowerShell and Azure CLI scripting.

• Strong understanding of Disaster Recovery (DR), backup strategies, High Availability, and Business Continuity.

• Experience with architecture documentation (HLD/LLD) and stakeholder presentations.

• Strong communication and stakeholder management skills.

Key Responsibilities

Azure Architecture & Design

• Design and implement Azure Landing Zones aligned with Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework.

• Develop HLDs, LLDs, architecture decision records, and solution blueprints.

• Define architecture for Azure compute, storage, VMs, AKS, App Services, and PaaS solutions.

Networking & Connectivity

• Design Hub-and-Spoke and Azure Virtual WAN architectures.

• Work with Azure Firewall, NSGs, UDRs, Private Endpoints, ExpressRoute, and Site-to-Site VPN.

• Manage DNS architecture and hybrid network connectivity.

Identity, Security & Governance

• Design Microsoft Entra ID, RBAC, PIM, and Conditional Access solutions.

• Implement Azure Policy, governance frameworks, and security controls.

• Work with Microsoft Defender for Cloud, Key Vault, CIS, NIST, and ISO 27001 standards.

Disaster Recovery & Migration

• Define BC/DR strategies, RPO/RTO targets, and cross-region architecture.

• Implement Azure Site Recovery, Azure Backup, and Availability Zones.

• Lead Azure Migrate assessments, migration planning, and modernization initiatives.

Automation & Operations

• Implement Infrastructure as Code using Terraform/Bicep.

• Build CI/CD pipelines using Azure DevOps or GitHub Actions.

• Design monitoring using Azure Monitor and Log Analytics.

• Drive cloud cost optimization and FinOps practices.

• Support major infrastructure incidents and root cause analysis.

Stakeholder Management

• Act as the primary infrastructure architecture contact for business and technology stakeholders.

• Present architecture solutions to review boards and senior leadership.

• Mentor engineers and support technical solutioning, estimates, and project scoping.

Preferred Certifications

• Required / Strongly Preferred: Microsoft Certified Azure Solutions Architect Expert (AZ-305).

• Azure Network Engineer Associate (AZ-700).

• Azure Security Engineer Associate (AZ-500).

• AWS Certified Solutions Architect Associate or Professional.

• Oracle Cloud Infrastructure Architect Associate or Professional.

• HashiCorp Certified: Terraform Associate.