Azure Cloud Solutions Architect

Position: Azure Cloud Solutions Architect (Infrastructure & Landing Zones)

Location: Hybrid/Onsite- Toronto, ON

Job type: Full-time/Permanent hiring

We are looking for a seasoned Lead Azure Cloud Solutions Architect with 10+ years of infrastructure engineering experience to spearhead enterprise cloud transformations. In this client-facing leadership role, you will design scalable Azure Landing Zones, architect complex hybrid networking topologies, and guide large-scale on-premises data center migrations. You will establish strict governance, identity, and security guardrails while championing Infrastructure-as-Code (IaC) automation and FinOps best practices across global delivery teams.

Core Responsibilities

• Enterprise Architecture & Landing Zones: Design and evolve Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework (CAF) and Well-Architected Framework, delivering comprehensive HLD/LLD documents and reference architectures.
• Hybrid Networking & Connectivity: Architect hub-and-spoke and Virtual WAN topologies incorporating ExpressRoute, Site-to-Site VPN, Azure Firewall, NVAs, Private Endpoints, and hybrid DNS resolution.
• Identity, Security & Governance: Establish Microsoft Entra ID RBAC models, Privileged Identity Management (PIM), and Azure Policy guardrails alongside Defender for Cloud and Key Vault aligned with CIS, NIST, and ISO 27001 standards.
• Large-Scale Cloud Migration: Lead server estate discovery and dependency mapping via Azure Migrate, formulating wave plans and executing rehost, replatform, and refactor modernization strategies.
• Business Continuity & Disaster Recovery: Define RPO/RTO targets and cross-region resilience patterns utilizing Azure Site Recovery (ASR), Azure Backup, and availability zones.
• IaC Automation & Observability: Standardize infrastructure deployments via Terraform or Bicep within Azure DevOps/GitHub Actions pipelines, while integrating Azure Monitor and Log Analytics with enterprise SIEM platforms.
• Stakeholder & Technical Leadership: Act as the primary architectural point of contact for client review boards, mentor delivery engineers, drive FinOps cost optimization, and contribute to presales scoping.

Required Technical Skills

• Experience: 10+ years in enterprise infrastructure engineering/architecture, including at least 5+ years of hands-on Azure architecture delivery.
• Core Azure Pillars: Deep mastery of Azure Landing Zones, management group hierarchies, Azure Policy, Entra ID, and large-scale data center migrations.
• Advanced Cloud Networking: Proven expertise configuring ExpressRoute, Virtual WAN, Firewalls, UDRs, NSGs, Private DNS Resolvers, and IPAM.
• Infrastructure-as-Code & Scripting: Strong hands-on proficiency writing Terraform and/or Bicep, paired with PowerShell or Azure CLI scripting and CI/CD pipelines.
• Resilience & Security: Solid background designing high-availability architectures, DR drills, backup strategies, and enterprise security controls.
• Certifications (Strongly Preferred): Microsoft Certified: Azure Solutions Architect Expert (AZ-305); bonus points for AZ-700, AZ-500, Terraform Associate, or multi-cloud (AWS/OCI) certifications.