Cloud Architect

KPMG LLP Canada; Toronto; Hybrid; CAD 86,000 - 129,000; Full time

Job summary

A global consulting firm in Toronto is seeking a skilled Cloud Architect to lead the transition to Microsoft EntraID. You will design secure cloud architectures and manage migrations from legacy systems, collaborating with various teams. Must have 3+ years of experience, a Bachelor's in a related field, and Azure Solutions Architect certification. This role offers competitive salary and an inclusive environment.

Benefits

Comprehensive Total Rewards program

Support for work-life balance

Inclusive work environment

Qualifications

• 3+ years proven experience in architecting solutions on major cloud platforms.
• Extensive expertise in Active Directory architecture and troubleshooting.
• Demonstrated expertise in managing identity and access management systems.

Responsibilities

• Design and develop scalable cloud architectures tailored to client requirements.
• Lead projects involving Active Directory migrations to Azure.
• Collaborate with internal teams to maintain cloud solutions.

Skills

Architecting solutions on cloud platforms

Active Directory administration

Communication skills

Problem-solving skills

Scripting with PowerShell

Education

Bachelor’s degree in Computer Science or related field

Microsoft Certified: Azure Solutions Architect Expert

Tools

Microsoft Azure

Okta

LDAP

Job description

Overview

At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world. We are seeking a dynamic and experienced Cloud Architect to spearhead our organization’s transition to Microsoft EntraID. This is a unique opportunity to leverage your expertise in cloud identity, architecture, and migration to make a significant impact on our digital landscape. You will be a member of KPMG Canada Business Enablement Services (BES) Technology Architecture & Implementation team. Your primary responsibility will be to lead the migration from legacy identity platforms to Microsoft EntraID, ensuring a secure, scalable, and seamless experience for our users. You will work closely with stakeholders across IT, security, operations, and business units to deliver a strategic roadmap and guide our transformation. An excellent communicator with a get-the-job-done attitude and mindset.

What you will do

• Design and develop scalable, secure, and reliable cloud architectures tailored to client requirements
• Lead projects involving Active Directory migrations, consolidations, and integrations with MS EntraID cloud identity services
• Extensive experience in designing and facilitating the application transition from local Active Directory to Azure cloud identity, ensuring seamless integration
• Proficient in designing and implementing hybrid identity solutions, including Azure AD Connect, to enable single sign-on (SSO) and secure access to cloud resources
• Demonstrated ability to troubleshoot and resolve complex identity synchronization issues, ensuring high availability and reliability of identity services
• Working with KPMG Global and KPMG Canada internal IdM team to support and provide guidance on EntraID/AzureAD and other modern IdM technologies
• Manage, deploy, and troubleshoot enterprise certificate authorities and oversee the complete certificate lifecycle across cloud and hybrid environments
• Collaborate with KPMG Global Architects, Canadian Architecture, Operations and Security teams to design, deploy and maintain cloud solutions for KPMG Canada
• Collaborate with technical teams on defining cloud architectural standards and best practices, providing consistent recommendations and oversight to team members
• Understand KPMG’s digital strategy, cloud platform capabilities, IT and business priorities and success measures to design implementation architectures and solutions
• Ensure that solution exhibits high levels of performance, security, scalability, maintainability, appropriate reusability, and reliability upon deployment

What you bring to the role

• Bachelor’s degree in Computer Science, Engineering, related STEM field or work experience
• 3+ years proven experience in architecting solutions on major cloud platforms (Azure, AWS, or GCP).
• Microsoft Certified: Azure Solutions Architect Expert
• Extensive expertise in Active Directory architecture, administration, and troubleshooting—covering domain controller deployment, security hardening, group policy management, directory synchronization, and cloud integration
• Demonstrated expertise in configuring, managing, and troubleshooting identity and access management systems (EntraID, Okta, MFA).
• Extensive hands-on experience with authentication protocols such as SAML, OAuth, OpenID Connect, and LDAP.
• Practical experience managing certificate authorities, PKI, certificate issuance, renewal, and revocation in complex enterprise environments
• Excellent communication skills with the ability to translate technical concepts for non-technical audiences
• Analytical mindset with strong problem-solving skills and attention to detail
• Demonstrated ability to work independently and as part of a collaborative team
• Strong understanding of cloud native architecture and principles and Infrastructure as a code
• Hands-on experience in designing and configuring secure and scalable cloud platforms on Microsoft Azure, including account structure, security and compliance audit, connectivity, shared services etc.
• Knowledge of cloud services: application integration, functions, databases, data warehouse and analytics, serverless computing, machine learning, developer tools, security and identity management
• Knowledge of and experience in API and Webhook development using PowerShell, Python, Node.js, Ruby, and Shell Scripting languages
• Excellent knowledge and experience with PowerShell, and Shell Scripting

This position requires written and oral fluency in English. The successful candidate will be required to support or collaborate with English-speaking colleagues or stakeholders nationally in our English speaking provinces while at KPMG.

KPMG BC Region Pay Range Information

The expected base salary range for this position is $86,000 to $128,500 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.

Providing you with the support you need to be at your best

Our Values, The KPMG Way

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.