Azure Cloud Architect / Azure Landing Zone Consultant

Nexasphere; Ottawa; On-site; CAD 120,000 - 170,000; Part time

Job summary

Nexasphere is seeking an experienced Azure Cloud Architect to design, implement, validate, and document a secure Landing Zone and Hub-and-Spoke architecture for Protected B workloads. The engagement is short-term with an urgent start and requires strong governance, policy, and security posture.

Ideal candidates bring deep Azure expertise, IaC proficiency with Bicep, and experience with Sentinel/Log Analytics. Bilingual English/French preferred; English-only candidates welcome.

Qualifications

• Deep expertise with Azure Landing Zones and governance.
• Experience with Hub-and-Spoke network architecture.
• Azure Firewall Premium and FortiGate implementation experience.
• Knowledge of Azure Policy, RBAC/PIM, Private DNS, Private Endpoints, NSGs, Defender for Cloud.
• IaC using Bicep and Azure DevOps.
• Experience with Microsoft Sentinel and Log Analytics.
• Ability to produce architecture documentation and handover materials.

Responsibilities

• Design, implement, validate, and document a secure Azure Landing Zone and Hub-and-Spoke architecture for Protected B workloads.
• Lead short-term engagement with urgent start.
• Produce architecture runbooks and operational handover materials.

Skills

Azure Landing Zones

Hub-and-Spoke architecture

Azure Firewall Premium

FortiGate

Azure Policy

RBAC/PIM

Private DNS

Private Endpoints

NSGs

Defender for Cloud

IaC with Bicep

Azure DevOps

Microsoft Sentinel

Log Analytics

Architecture documentation

Tools

Bicep

Azure DevOps

Job description

We Are Hiring: Azure Cloud Architect / Azure Landing Zone Consultant

Description:

We are seeking an experienced Azure consultant to design, implement, validate, and document a secure Azure Landing Zone and Hub-and-Spoke architecture supporting Protected B workloads. This is a short-term engagement with an urgent start.

Requirements:

• Deep expertise with Azure Landing Zones and governance
• Experience with Hub-and-Spoke network architecture
• Azure Firewall Premium and/or FortiGate implementation experience
• Strong knowledge of Azure Policy, RBAC/PIM, Private DNS, Private Endpoints, NSGs, and Defender for Cloud
• Infrastructure as Code experience using Bicep and Azure DevOps
• Experience with Microsoft Sentinel and Log Analytics
• Ability to produce architecture documentation, runbooks, and operational handover materials
• SECRET Security Clearance preferred
• Bilingual (English/French) preferred, English-only candidates welcome

#Azure #AzureCloud #CloudSecurity #AzureLandingZone #InfrastructureAsCode #Bicep #AzureDevOps #MicrosoftSentinel #CloudArchitect #Hiring #TechJobs #GovernmentIT #CyberSecurity