Senior Azure Platform Engineer

TEEMA; Richmond; Hybride; CAD 120 000 - 160 000; Plein temps

Résumé du poste

TEEMA is seeking a Senior Azure Platform Engineer for a permanent role in Richmond, BC, offering a hybrid work model. The candidate will own the design, implementation, and ongoing improvement of a large Azure environment spanning multiple subscriptions and business groups.

You will drive landing zones, governance, security, cost controls, and infrastructure as code using Terraform/Bicep, with Azure DevOps or GitHub pipelines.

Qualifications

• Bachelor's degree or equivalent in CS/Engineering.
• 10+ years in infrastructure/cloud with Azure focus.
• Azure Solutions Architect Expert is strongly preferred.

Responsabilités

• Design, implement, and continually improve enterprise Azure landing zones, management groups, subscription structures, and patterns.
• Define and implement Azure governance standards, including Policy, naming, tagging, and compliance reporting.
• Design secure identity and access models using Entra ID, Azure RBAC, PIM, issued service principals, and least-privilege admin.
• Architect enterprise Azure networking including VNets, routing, hub-and-spoke, ExpressRoute, and Firewall.
• Collaborate with cybersecurity to implement Defender for Cloud, Key Vault, monitoring, logging, and security baselines.
• Develop reusable IaC modules using Terraform and/or Bicep, supported by Git-based review, testing, and pipelines (Azure DevOps or GitHub).
• Establish monitoring, cost visibility, quotas, backup, resilience, and disaster-recovery standards.
• Support incident investigation, root-cause analysis, and runbooks deployment.
• Review third-party Azure designs and provide technical guidance to internal teams.
• Balance security/governance with delivery practicality for decentralized teams.

Connaissances

Azure architecture design

Multi-subscription governance

Networking (ExpressRoute, VNets)

Security and compliance

CI/CD pipelines

Formation

Bachelor's degree in CS/Engineering

10+ years infrastructure/cloud experience

Azure Certifications preferred

Outils

Terraform

Bicep

PowerShell

Azure DevOps

Git

Description du poste

On behalf of our client, TEEMA is recruiting for a Senior Azure Platform Engineer. This is a Permanent Opportunity and candidates must be comfortable working a hybrid model in Richmond, BC.

The ideal candidate has built or substantially redesigned a large, production Azure environment spanning multiple subscriptions, workloads, teams, or business groups. They can assess an existing Azure estate, identify structural and operational risks, define a practical target architecture, and personally help implement the required improvements using infrastructure as code and modern engineering practices.

What you’ll do

• Design, implement, and continually improve enterprise Azure landing zones, management groups, subscription structures, and platform and workload landing-zone patterns.
• Define and implement Azure governance standards, including Azure Policy, naming, tagging, approved regions and services, configuration requirements, exemptions, and compliance reporting.
• Design secure identity and access models using Microsoft Entra ID, Azure RBAC, Privileged Identity Management, managed identities, service principals, and least-privilege administration.
• Architect enterprise Azure networking, including virtual networks, routing, segmentation, hub-and-spoke connectivity, Azure Firewall, network security groups, Private Link, Private Endpoints, DNS, VPN, and ExpressRoute.
• Partner with cybersecurity to implement Microsoft Defender for Cloud, Key Vault, secure administration, logging, auditing, security baselines, and configuration controls.
• Develop and maintain reusable infrastructure-as-code modules using Terraform and/or Bicep, supported by Git-based review, testing, and deployment pipelines in Azure DevOps or GitHub.
• Establish Azure Monitor, Log Analytics, diagnostic settings, alerting, centralized logging, service health, platform capacity, quota, backup, resilience, and disaster-recovery standards.
• Support incident investigation, root-cause analysis, platform problem management, remediation, and the development of operational runbooks.
• Improve Azure cost visibility and resource optimization using subscription and tagging structures, Azure Cost Management, reservations, savings plans, and practical FinOps disciplines.
• Create reference architectures, technical standards, implementation patterns, architecture decision records, and platform roadmaps.
• Review and challenge third-party Azure designs, and provide technical guidance to internal teams and operating businesses.

What are we looking for:

• Demonstrated ownership of a complex, production Azure environment spanning multiple subscriptions, workload teams, or business groups.
• Direct experience designing or implementing Azure Landing Zones and applying the Microsoft Cloud Adoption Framework and Azure Well-Architected principles.
• Deep hands-on knowledge of Azure networking, Microsoft Entra ID, Azure RBAC, Privileged Identity Management, Azure Policy, Microsoft Defender for Cloud, Key Vault, Azure Monitor, and Log Analytics.
• Strong practical capability with Terraform and/or Bicep, PowerShell or Azure CLI, Git, and CI/CD pipelines.
• Experience with hybrid connectivity, platform security, monitoring, backup, recovery, resilience, and production operational support.
• Ability to move comfortably between architecture strategy, detailed engineering, implementation, and troubleshooting.
• Excellent written and verbal communication skills, including the ability to explain architecture decisions, risks, costs, and technical trade-offs to technical and non-technical audiences.
• Strong judgment, ownership, collaboration, documentation, and stakeholder-management skills.
• Ability to balance enterprise security and governance requirements with delivery practicality and the autonomy of a decentralized group of businesses.

Education and Experience

• Undergraduate degree in computer science, engineering, information systems, technology, or a related discipline, or an equivalent combination of education and experience.
• Approximately ten or more years of progressive infrastructure, cloud, or platform experience, including at least five years of substantial Microsoft Azure architecture and engineering responsibility.
• Microsoft Certified: Azure Solutions Architect Expert is strongly preferred.
• Azure Administrator Associate, Azure Network Engineer Associate, Azure Security Engineer Associate, DevOps Engineer Expert, and relevant Terraform certifications are considered assets.