DevOps Architect

Full Time Permanent Role

Annual Compensation CAD 120,000 plus benefits

Remote across Canada

Looking for lead and architecture experience.

MS Azure focussed

IaaC / Terraforms

Required Knowledge & Experience

• Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.
• 10+ years in Cloud Engineering, Platform Engineering, DevOps, SRE, or Infrastructure Engineering.
• 5+ years of hands-on experience with Microsoft Azure cloud services and architecture.
• 5+ years building Infrastructure as Code, with strong hands-on Terraform experience.
• Strong experience automating infrastructure with Ansible and scripting in Python, PowerShell, and/or Bash.
• Hands-on experience with Kubernetes (ideally AKS) and Helm.
• Experience with CI/CD pipelines and GitOps practices (Azure DevOps, GitHub, GitHub Actions).
• Solid understanding of cloud networking, security, identity, and governance.
• Experience with Windows and Linux operating system configuration, automation, and management
• Experience with patch orchestration and vulnerability remediation.
• Excellent written and verbal communication, technical analysis, and problem-solving skills.
• Ability to learn new technologies quickly and work effectively in a collaborative, agile team.

What You’ll Do

Cloud & Platform Engineering

• Design, build, and operate shared cloud platform services on Microsoft Azure that product teams consume for provisioning, deployment, and day-to-day operations.
• Develop reusable platform capabilities, modules, templates, and pipelines — that accelerate secure, self-service cloud adoption.
• Design and manage enterprise cloud networking and connectivity, including hub-and-spoke topologies, next-generation firewalls, DNS, VPN, peering, and secure administrative access.
• Build and operate Azure Kubernetes Service (AKS) clusters and Helm-based application delivery for shared platform and product workloads.
• Provision and manage Azure PaaS and data services, including Key Vault, Storage, Azure SQL and MySQL, Cosmos DB, Redis, and Event Hub, with private, secure connectivity.
• Manage secure ingress and content delivery services, including Application Gateway/WAF, Azure Front Door, API Management, and CDN.
• Maintain golden VM images and hardened infrastructure baselines.

Infrastructure as Code & Automation

• Build and maintain Terraform-based provisioning frameworks and shared modules.
• Develop automation with Ansible, Python, PowerShell, Bash, and cloud-native APIs.
• Create and maintain CI/CD pipelines using GitOps practices, and help modernize tooling (including migrating pipelines from Azure DevOps to GitHub).
• Drive modernization through an automation-first approach that reduces manual operations.

Security, Governance & Compliance

• Design and manage identity and access using Microsoft Entra ID, including role-based access control, Privileged Identity Management (PIM), Conditional Access, and phishing-resistant MFA.
• Own certificate and PKI services, including internal/private certificate authorities, cert-manager, certificate issuance, rotation, and trust distribution, and Azure Key Vault.
• Translate security and compliance requirements into cloud-native guardrails and standards, and support audit and compliance programs such as PCI DSS and FedRAMP.
• Harden Windows and Linux baselines to CIS/STIG benchmarks and remediate vulnerability and penetration-test findings.
• Improve cloud security posture using tooling such as Cloud Security Posture Management (CSPM) and continuous compliance monitoring, partnering with Security and Architecture teams on least-privilege, audit-ready access models.

Reliability & Operations

• Operate and support business-critical cloud platform services and participate in an on-call rotation.
• Implement robust observability, monitoring, logging, alerting, and dashboard, across the platform.
• Lead incident response, root-cause analysis, and remediation, and drive reliability and performance improvements.
• Own patch orchestration and vulnerability remediation across Windows and Linux fleets.
• Support release and change management, including outage-less deployment patterns such as blue/green and rolling deployments.
• Partner with FinOps to identify and implement cloud cost-optimization opportunities.

Technical Leadership

• Act as a subject-matter expert for Azure cloud and platform engineering.
• Provide code reviews and quality assurance on team members’ automation and infrastructure work.
• Mentor engineers and contribute to engineering standards and best practices.
• Participate in agile ceremonies and contribute stories and defects to the team’s backlog.
• Explore and apply AI-assisted and agentic tooling to streamline cloud operations, troubleshooting, and documentation.

Preferred Knowledge & Experience

• Azure identity and governance tooling (Entra ID, PIM, Conditional Access)
• Certificate and PKI management, including private certificate authorities, cert-manager, and certificate automation.
• Azure PaaS and data services (e.g. Key Vault, Storage, Cosmos DB, Azure SQL/MySQL, Redis, Event Hub, Data Factory).
• Azure API Management, Application Gateway/WAF, Azure Front Door, and CDN (including Akamai or Cloudflare).
• Enterprise networking with next-generation firewalls (e.g., Fortinet) in hub-and-spoke topologies.
• Compliance and hardening experience, PCI DSS, FedRAMP, CIS/STIG benchmarks,and penetration-test remediation.
• Cloud cost management / FinOps.
• Observability and analytics tooling such as New Relic, Zabbix, Grafana, or Splunk.
• Cloud Security Posture Management (e.g., Wiz) and Microsoft Defender for Cloud.
• Container tooling and image build automation (Docker, Azure Container Registry, Packer), and build/CI platforms such as GitHub Actions or TeamCity.
• Cloud-based high availability and disaster recovery design.
• Cross-cloud identity federation and workload identity (e.g., OIDC to AWS) and exposure to multi-cloud environments.
• Internal developer platform (IDP) or Cloud Center of Excellence (CCoE) practices.
• Interest in applying AI-powered operational tooling or agentic automation, and supporting emerging AI/ML workloads.

What Success Looks Like

• Increased automation and a measurable reduction in manual cloud operations.
• Improved cloud security, compliance, and governance posture.
• Faster, more consistent onboarding, provisioning, and deployments for product teams.
• An enhanced developer experience through reusable, self-service platform services.
• Scalable, reliable, and secure Azure operations that support high-stakes test delivery.