DevOps Architect

Linux Association of Canada; Northwestern Ontario; Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Remote across Canada

Job summary

Linux Association of Canada seeks a Lead Cloud & Platform Engineer with architecture focus to design, build, and operate shared Azure platform services used by product teams for provisioning, deployment, and day-to-day operations.

You will develop reusable modules, templates, and pipelines to accelerate secure, self-service cloud adoption, and manage enterprise networking, AKS clusters, PaaS/data services, and secure ingress. Remote across Canada with strong collaboration and agile practices.

Qualifications

• 10+ years in Cloud Engineering, Platform Engineering, DevOps, SRE, or Infrastructure Engineering.
• 5+ years of hands-on experience with Microsoft Azure cloud services and architecture.
• 5+ years building Infrastructure as Code with Terraform.
• Hands-on experience with Ansible and scripting in Python, PowerShell, and/or Bash.
• Hands-on Kubernetes experience (AKS) and Helm.
• Experience with CI/CD pipelines and GitOps (Azure DevOps, GitHub, GitHub Actions).
• Solid understanding of cloud networking, security, identity, governance.
• Experience with Windows and Linux OS configuration, automation, and management.
• Experience with patch orchestration and vulnerability remediation.
• Excellent written and verbal communication, technical analysis, and problem-solving skills.

Responsibilities

• Design, build, and operate shared cloud platform services on Microsoft Azure for provisioning, deployment, and day-to-day operations.
• Develop reusable platform capabilities, modules, templates, and pipelines for secure, self-service cloud adoption.
• Design and manage enterprise cloud networking and connectivity, hub-and-spoke topologies, firewalls, DNS, VPN, and secure admin access.
• Build and operate AKS clusters and Helm-based delivery for platform workloads.
• Provision and manage Azure PaaS and data services (Key Vault, Storage, Azure SQL/MySQL, Cosmos DB, Redis, Event Hub).
• Manage secure ingress and content delivery services (Application Gateway/WAF, Front Door, API Management, CDN).
• Maintain golden VM images and hardened infrastructure baselines.
• Develop Terraform-based provisioning frameworks and automation with Ansible, Python, PowerShell, Bash; implement CI/CD pipelines with GitOps.

Skills

Azure

Terraform

Kubernetes

Ansible

Python

PowerShell

Bash

CI/CD

GitOps

GitHub Actions

Networking

Security governance

Azure DevOps

AKS

Education

Bachelor's degree in CS or related field

Tools

Terraform

Ansible

AKS (Azure Kubernetes Service)

Helm

Python

PowerShell

Bash

Azure DevOps

GitHub

GitHub Actions

Job description

Full Time Permanent RoleAnnual Compensation CAD 120,000 plus benefitsRemote across CanadaLooking for lead and architecture experience.MS Azure focussedIaaC / TerraformsRequired Knowledge & ExperienceBachelor’s degree in Computer Science or a related field, or equivalent practical experience. 10+ years in Cloud Engineering, Platform Engineering, DevOps, SRE, or Infrastructure Engineering. 5+ years of hands-on experience with Microsoft Azure cloud services and architecture. 5+ years building Infrastructure as Code, with strong hands-on Terraform experience. Strong experience automating infrastructure with Ansible and scripting in Python, PowerShell, and/or Bash. Hands-on experience with Kubernetes (ideally AKS) and Helm. Experience with CI/CD pipelines and GitOps practices (Azure DevOps, GitHub, GitHub Actions). Solid understanding of cloud networking, security, identity, and governance. Experience with Windows and Linux operating system configuration, automation, and management Experience with patch orchestration and vulnerability remediation. Excellent written and verbal communication, technical analysis, and problem-solving skills. Ability to learn new technologies quickly and work effectively in a collaborative, agile team.What You’ll DoCloud & Platform EngineeringDesign, build, and operate shared cloud platform services on Microsoft Azure that product teams consume for provisioning, deployment, and day-to-day operations. Develop reusable platform capabilities, modules, templates, and pipelines — that accelerate secure, self-service cloud adoption. Design and manage enterprise cloud networking and connectivity, including hub-and-spoke topologies, next-generation firewalls, DNS, VPN, peering, and secure administrative access. Build and operate Azure Kubernetes Service (AKS) clusters and Helm-based application delivery for shared platform and product workloads. Provision and manage Azure PaaS and data services, including Key Vault, Storage, Azure SQL and MySQL, Cosmos DB, Redis, and Event Hub, with private, secure connectivity. Manage secure ingress and content delivery services, including Application Gateway/WAF, Azure Front Door, API Management, and CDN. Maintain golden VM images and hardened infrastructure baselines.Infrastructure as Code & AutomationBuild and maintain Terraform-based provisioning frameworks and shared modules. Develop automation with Ansible, Python, PowerShell, Bash, and cloud-native APIs. Create and maintain CI/CD pipelines using GitOps practices, and help modernize tooling (including migrating pipelines from Azure DevOps to GitHub). Drive modernization through an automation-first approach that reduces manual operations.Security, Governance & ComplianceDesign and manage identity and access using Microsoft Entra ID, including role-based access control, Privileged Identity Management (PIM), Conditional Access, and phishing-resistant MFA. Own certificate and PKI services, including internal/private certificate authorities, cert-manager, certificate issuance, rotation, and trust distribution, and Azure Key Vault. Translate security and compliance requirements into cloud-native guardrails and standards, and support audit and compliance programs such as PCI DSS and FedRAMP. Harden Windows and Linux baselines to CIS/STIG benchmarks and remediate vulnerability and penetration-test findings. Improve cloud security posture using tooling such as Cloud Security Posture Management (CSPM) and continuous compliance monitoring, partnering with Security and Architecture teams on least-privilege, audit-ready access models.Reliability & OperationsOperate and support business-critical cloud platform services and participate in an on-call rotation. Implement robust observability, monitoring, logging, alerting, and dashboard, across the platform. Lead incident response, root-cause analysis, and remediation, and drive reliability and performance improvements. Own patch orchestration and vulnerability remediation across Windows and Linux fleets. Support release and change management, including outage-less deployment patterns such as blue/green and rolling deployments. Partner with FinOps to identify and implement cloud cost-optimization opportunities.Technical LeadershipAct as a subject-matter expert for Azure cloud and platform engineering. Provide code reviews and quality assurance on team members’ automation and infrastructure work. Mentor engineers and contribute to engineering standards and best practices. Participate in agile ceremonies and contribute stories and defects to the team’s backlog. Explore and apply AI-assisted and agentic tooling to streamline cloud operations, troubleshooting, and documentation.Preferred Knowledge & ExperienceAzure identity and governance tooling (Entra ID, PIM, Conditional Access) Certificate and PKI management, including private certificate authorities, cert-manager, and certificate automation. Azure PaaS and data services (e.g. Key Vault, Storage, Cosmos DB, Azure SQL/MySQL, Redis, Event Hub, Data Factory). Azure API Management, Application Gateway/WAF, Azure Front Door, and CDN (including Akamai or Cloudflare). Enterprise networking with next-generation firewalls (e.g., Fortinet) in hub-and-spoke topologies. Compliance and hardening experience, PCI DSS, FedRAMP, CIS/STIG benchmarks,and penetration-test remediation. Cloud cost management / FinOps. Observability and analytics tooling such as New Relic, Zabbix, Grafana, or Splunk. Cloud Security Posture Management (e.g., Wiz) and Microsoft Defender for Cloud. Container tooling and image build automation (Docker, Azure Container Registry, Packer), and build/CI platforms such as GitHub Actions or TeamCity. Cloud-based high availability and disaster recovery design. Cross-cloud identity federation and workload identity (e.g., OIDC to AWS) and exposure to multi-cloud environments. Internal developer platform (IDP) or Cloud Center of Excellence (CCoE) practices. Interest in applying AI-powered operational tooling or agentic automation, and supporting emerging AI/ML workloads.What Success Looks LikeIncreased automation and a measurable reduction in manual cloud operations. Improved cloud security, compliance, and governance posture. Faster, more consistent onboarding, provisioning, and deployments for product teams. An enhanced developer experience through reusable, self-service platform services. Scalable, reliable, and secure Azure operations that support high-stakes test delivery.