Senior Azure Platform Engineer

On behalf of our client, TEEMA is recruiting for a Senior Azure Platform Engineer. This is a Permanent Opportunity and candidates must be comfortable working a hybrid model in Richmond, BC.

The ideal candidate has built or substantially redesigned a large, production Azure environment spanning multiple subscriptions, workloads, teams, or business groups. They can assess an existing Azure estate, identify structural and operational risks, define a practical target architecture, and personally help implement the required improvements using infrastructure as code and modern engineering practices.

What you’ll do

• Design, implement, and continually improve enterprise Azure landing zones, management groups, subscription structures, and platform and workload landing-zone patterns.
• Define and implement Azure governance standards, including Azure Policy, naming, tagging, approved regions and services, configuration requirements, exemptions, and compliance reporting.
• Design secure identity and access models using Microsoft Entra ID, Azure RBAC, Privileged Identity Management, managed identities, service principals, and least-privilege administration.
• Architect enterprise Azure networking, including virtual networks, routing, segmentation, hub-and-spoke connectivity, Azure Firewall, network security groups, Private Link, Private Endpoints, DNS, VPN, and ExpressRoute.
• Partner with cybersecurity to implement Microsoft Defender for Cloud, Key Vault, secure administration, logging, auditing, security baselines, and configuration controls.
• Develop and maintain reusable infrastructure-as-code modules using Terraform and/or Bicep, supported by Git-based review, testing, and deployment pipelines in Azure DevOps or GitHub.
• Establish Azure Monitor, Log Analytics, diagnostic settings, alerting, centralized logging, service health, platform capacity, quota, backup, resilience, and disaster-recovery standards.
• Support incident investigation, root-cause analysis, platform problem management, remediation, and the development of operational runbooks.
• Improve Azure cost visibility and resource optimization using subscription and tagging structures, Azure Cost Management, reservations, savings plans, and practical FinOps disciplines.
• Create reference architectures, technical standards, implementation patterns, architecture decision records, and platform roadmaps.
• Review and challenge third-party Azure designs, and provide technical guidance to internal teams and operating businesses.

What are we looking for:

• Demonstrated ownership of a complex, production Azure environment spanning multiple subscriptions, workload teams, or business groups.
• Direct experience designing or implementing Azure Landing Zones and applying the Microsoft Cloud Adoption Framework and Azure Well-Architected principles.
• Deep hands-on knowledge of Azure networking, Microsoft Entra ID, Azure RBAC, Privileged Identity Management, Azure Policy, Microsoft Defender for Cloud, Key Vault, Azure Monitor, and Log Analytics.
• Strong practical capability with Terraform and/or Bicep, PowerShell or Azure CLI, Git, and CI/CD pipelines.
• Experience with hybrid connectivity, platform security, monitoring, backup, recovery, resilience, and production operational support.
• Ability to move comfortably between architecture strategy, detailed engineering, implementation, and troubleshooting.
• Excellent written and verbal communication skills, including the ability to explain architecture decisions, risks, costs, and technical trade-offs to technical and non-technical audiences.
• Strong judgment, ownership, collaboration, documentation, and stakeholder-management skills.
• Ability to balance enterprise security and governance requirements with delivery practicality and the autonomy of a decentralized group of businesses.

Education and Experience

• Undergraduate degree in computer science, engineering, information systems, technology, or a related discipline, or an equivalent combination of education and experience.
• Approximately ten or more years of progressive infrastructure, cloud, or platform experience, including at least five years of substantial Microsoft Azure architecture and engineering responsibility.
• Microsoft Certified: Azure Solutions Architect Expert is strongly preferred.
• Azure Administrator Associate, Azure Network Engineer Associate, Azure Security Engineer Associate, DevOps Engineer Expert, and relevant Terraform certifications are considered assets.