Position: Azure Cloud Solutions Architect (Infrastructure & Landing Zones)
Location: Hybrid/Onsite- Toronto, ON
Job type: Full-time/Permanent hiring
We are looking for a seasoned Lead Azure Cloud Solutions Architect with 10+ years of infrastructure engineering experience to spearhead enterprise cloud transformations. In this client-facing leadership role, you will design scalable Azure Landing Zones, architect complex hybrid networking topologies, and guide large-scale on-premises data center migrations. You will establish strict governance, identity, and security guardrails while championing Infrastructure-as-Code (IaC) automation and FinOps best practices across global delivery teams.
Core Responsibilities
- Enterprise Architecture & Landing Zones: Design and evolve Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework, delivering comprehensive HLD/LLD documents and reference architectures.
- Hybrid Networking & Connectivity: Architect hub-and-spoke and Virtual WAN topologies incorporating ExpressRoute, Site-to-Site VPN, Azure Firewall, NVAs, Private Endpoints, and hybrid DNS resolution.
- Identity, Security & Governance: Establish Microsoft Entra ID RBAC models, Privileged Identity Management (PIM), and Azure Policy guardrails alongside Defender for Cloud and Key Vault aligned with CIS, NIST, and ISO 27001 standards.
- Large-Scale Cloud Migration: Lead server estate discovery and dependency mapping via Azure Migrate, formulating wave plans and executing rehost, replatform, and refactor modernization strategies.
- Business Continuity & Disaster Recovery: Define RPO/RTO targets and cross-region resilience patterns utilizing Azure Site Recovery (ASR), Azure Backup, and availability zones.
- IaC Automation & Observability: Standardize infrastructure deployments via Terraform or Bicep within Azure DevOps/GitHub Actions pipelines, while integrating Azure Monitor and Log Analytics with enterprise SIEM platforms.
- Stakeholder & Technical Leadership: Act as the primary architectural point of contact for client review boards, mentor delivery engineers, drive FinOps cost optimization, and contribute to presales scoping.
Required Technical Skills
- Experience: 10+ years in enterprise infrastructure engineering/architecture, including at least 5+ years of hands-on Azure architecture delivery.
- Core Azure Pillars: Deep mastery of Azure Landing Zones, management group hierarchies, Azure Policy, Entra ID, and large-scale data center migrations.
- Advanced Cloud Networking: Proven expertise configuring ExpressRoute, Virtual WAN, Firewalls, UDRs, NSGs, Private DNS Resolvers, and IPAM.
- Infrastructure-as-Code & Scripting: Strong hands-on proficiency writing Terraform and/or Bicep, paired with PowerShell or Azure CLI scripting and CI/CD pipelines.
- Resilience & Security: Solid background designing high-availability architectures, DR drills, backup strategies, and enterprise security controls.
- Certifications (Strongly Preferred): Microsoft Certified: Azure Solutions Architect Expert (AZ-305); bonus points for AZ-700, AZ-500, Terraform Associate, or multi-cloud (AWS/OCI) certifications.
