Microsoft Azure Cloud Engineer

Insight Global; Toronto; On-site; CAD 80,000 - 120,000; Full time

Job summary

A leading technology services company is seeking a hands-on Microsoft Azure Engineer to design and build secure Azure environments. The role involves establishing Azure Cloud Landing Zones, automating processes, and collaborating with various teams for cloud migration and security. Ideal candidates should have over 3 years of experience with Microsoft Azure and strong skills in IaC and DevOps. This opportunity promotes a diverse and inclusive work culture, ensuring all qualified candidates are considered regardless of their background.

Qualifications

• 3+ years of hands-on experience engineering solutions in Microsoft Azure.
• Strong IaC experience with Terraform and/or Bicep/ARM.
• Solid DevOps experience building CI/CD workflows.

Responsibilities

• Design, build, and operate secure Azure environments.
• Establish and evolve Azure Cloud Landing Zones.
• Implement strong security and governance controls.

Skills

Microsoft Azure

Terraform

DevOps

CI/CD workflows

PowerShell

Azure CLI

Tools

Azure DevOps

GitHub Actions

Kubernetes

Job description

Job Description

Insight Global is looking for a hands‑on Microsoft Azure Engineer to design, build, and operate secure, scalable Azure environments. You will play a key role in establishing and evolving Azure Cloud Landing Zones, enabling DevOps and CI/CD, delivering Infrastructure as Code (IaC), executing cloud migrations, and implementing strong security and governance controls across the platform.

This role suits someone who enjoys building repeatable cloud foundations, automating everything possible, and partnering with application, infrastructure, and security teams to modernize workloads safely and efficiently.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail]. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 3+ years of hands‑on experience engineering solutions in Microsoft Azure
• Demonstrated experience implementing or operating Azure Landing Zones / enterprise Azure foundations
• Strong IaC experience with Terraform and/or Bicep/ARM (modules, standards, environments, pipelines)
• Solid DevOps experience building CI/CD workflows using Azure DevOps and/or GitHub Actions
• Migration experience supporting cloud adoption and workload transitions to Azure
• Working knowledge of core Azure services, including:
  • Azure Networking (VNets, peering, routing, DNS, Private Endpoints)
  • Identity & Access (Entra ID, RBAC, PIM concepts)
  • Compute and platform services (VMs, App Service, Storage, AKS basics)
  • Monitoring (Azure Monitor, Log Analytics)
• Scripting and automation skills with PowerShell, Azure CLI, Bash, and/or Python
• Ability to write clear documentation and collaborate across engineering, infrastructure, and security teams
• Experience with the Azure CAF methodology and enterprise‑scale architecture patterns
• Strong background in cloud security architecture and operations, including:
  • Defender for Cloud, Sentinel, vulnerability management, secure workload patterns
• Experience with Kubernetes/containers (AKS, ACR, container security concepts)
• Knowledge of FinOps practices (cost allocation, tagging policies, budgets, optimization)
• Experience with hybrid connectivity and enterprise networking: ExpressRoute, VPN Gateway, vWAN
• Familiarity with SRE/operational best practices (SLIs/SLOs, error budgets, postmortems)