Azure Cloud Infra Architect — Hybrid Canada

Adastra Corporation; Toronto; Hybrid; CAD 120,000 - 145,000; Full time

Benefits offered by this job

Competitive compensation package

Comprehensive benefits plan

Career progression opportunities

Referral program

Dynamic, diverse workplace

Job summary

Adastra Corporation is seeking an Azure Infrastructure Architect to design and deliver the Azure foundations that data, analytics and AI programs run on: landing zones, governance, and hub-and-spoke networking. You will work with client IT, networking and security teams as the technical lead on delivery projects.

This role blends hands-on implementation with pre-sales support, including Terraform/Bicep IaC, CI/CD pipelines, monitoring, and security controls, requiring strong Azure expertise and

Qualifications

• 5+ years hands-on cloud or enterprise infra engineering with Azure expertise.
• Experience with hub-and-spoke architectures, ExpressRoute, VPN, private endpoints, DNS, NSGs, UDRs.
• Proficient with IaC using Terraform and/or Bicep.
• Experience CI/CD for infrastructure with GitHub Actions and/or Azure DevOps.
• Knowledge of Azure governance, Azure Policy, RBAC and cost management.
• Experience with Entra ID, Key Vault and Defender for Cloud.
• Experience provisioning data platforms like Fabric, Azure Data services or Databricks.
• Experience monitoring with Azure Monitor and Log Analytics.

Responsibilities

• Design and deploy secure, scalable Azure subscriptions, landing zones, resource providers, naming conventions and tagging standards.
• Establish Azure governance using Azure Policy, cost budgets, alerts and FinOps guardrails.
• Implement least-privilege, scoped and time-bound RBAC access across delivery and client teams.
• Design hub-and-spoke Azure network architectures, including VNets, subnets, private endpoints and delegated services.
• Configure ExpressRoute and VPN connectivity, VNet peering, remote gateways, NSGs, UDRs, Azure Firewall and third-party network appliances.
• Lead end-to-end network connectivity testing, troubleshooting and remediation.
• Develop reusable Terraform modules for networking, security, monitoring and data-platform infrastructure, leveraging Bicep/ARM.
• Build CI/CD pipelines using GitHub Actions or Azure DevOps with OIDC federated credentials and environment approvals.
• Maintain secure IaC practices across Dev, Test and Prod with remote state management and runbooks.
• Coach client teams on Azure infrastructure, security, governance and operational best practices.
• Support pre-sales activities, including proposals and solution documentation.

Skills

Azure networking

Hub-and-spoke

IaC (Terraform/Bicep)

CI/CD pipelines

RBAC and least privilege

Azure governance & Policy

Security and identity management

Tools

Terraform

Bicep/ARM

GitHub Actions

Azure DevOps

Job description

Adastra Corporation is seeking an Azure Infrastructure Architect to design and deliver the Azure foundations that data, analytics and AI programs run on: landing zones, governance, and hub-and-spoke networking. You will work with client IT, networking and security teams as the technical lead on delivery projects.

This role blends hands-on implementation with pre-sales support, including Terraform/Bicep IaC, CI/CD pipelines, monitoring, and security controls, requiring strong Azure expertise and