Senior Cloud and Infrastructure Engineer

Mohawk Medbuy Corporation; Toronto; Hybrid; CAD 95,000 - 120,000; Full time

Job summary

Mohawk Medbuy Corporation seeks a Senior Cloud and Infrastructure Engineer to own Azure and enterprise network design in a hybrid environment. You will build, operate, and secure Azure resources with Terraform, manage network infrastructure, and mentor team members across IT stakeholders.

You will lead CI/CD pipelines, governance, monitoring, backups, and site recovery while collaborating with Security, Applications, Data, and external vendors.

Qualifications

• University degree or college diploma in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.
• Minimum 6-8 years of progressive experience in enterprise infrastructure, including recent hands‑on work in a senior role.
• Production experience building and supporting Azure environments in a hybrid setting.
• Production experience with Terraform on Azure.
• Strong hands‑on experience with enterprise networking: routing, switching, firewalls, and VPN.
• Experience troubleshooting complex network issues across on‑premises and cloud environments.
• Experience with infrastructure security, secure configuration baselines, vulnerability remediation, and Entra ID with Conditional Access.
• Experience supporting Windows Server and Hyper‑V or VMware.
• Experience developing infrastructure architecture and technical designs in a collaborative, team‑based setting.

Responsibilities

• Build, operate, and support the organization's Azure environment, including compute, storage, networking, and platform services.
• Deploy and manage Azure resources through Terraform, and maintain modules, state, and coding standards.
• Build and maintain CI/CD pipelines for infrastructure deployment (GitHub or Azure DevOps).
• Manage Azure Governance: management groups, Azure Policy, tagging, and cost management.
• Configure and support Azure Monitor, Azure Backup, and Azure Site Recovery.
• Support cloud migrations and the Azure infrastructure needs of application and data teams.
• Troubleshoot and resolve Azure platform, connectivity, and performance issues.
• Configure, maintain, and troubleshoot LAN, WAN, and wireless networks across corporate sites.
• Manage firewalls, including policy changes, NAT, site-to-site and remote access VPN.
• Support routing, switching, and SD-WAN.
• Implement and support Azure networking: VNets, peering, NSGs, Private Endpoints, VPN gateways, and Virtual WAN.
• Manage DNS, DHCP, and IP address management across on-premises and Azure.
• Provide secure connectivity for corporate sites, cloud services, remote users, and external partners.
• Plan and carry out network changes and upgrades with minimal disruption to the business.
• Implement infrastructure security controls such as network segmentation, Azure Firewall, web application firewalls, and Azure Key Vault.
• Apply secure configuration baselines using Defender for Cloud and Azure Policy and lead infrastructure vulnerability remediation.
• Support Entra ID, Conditional Access, and hybrid identity, and integrate infrastructure logging with the organization's SIEM.
• Support Windows Server, virtualization, storage, and backup, including high availability and disaster recovery.
• Oversee infrastructure monitoring across on-premises and Azure environments.
• Own the infrastructure architecture for Azure and the enterprise network, developed collaboratively with the infrastructure team and other IT stakeholders.
• Lead team-based design sessions and architecture reviews for infrastructure and cloud projects.
• Develop technical designs that balance security, availability, performance, and cost.
• Maintain infrastructure standards and reference designs and evaluate new Azure and networking capabilities for recommendation to the Manager.
• Serve as the senior escalation point for complex infrastructure and network issues.
• Lead the technical implementation of infrastructure and cloud projects, from design to handover to operations.
• Mentor team members and maintain configuration and support documentation.

Skills

Azure networking

Technical leadership

Problem solving

Documentation

Communication

Independent work

Education

University degree or college diploma in CS/IT

Tools

Terraform

Azure DevOps

GitHub

PowerShell

Bicep

Job description

Senior Cloud and Infrastructure Engineer

We are currently recruiting for a Senior Cloud & Infrastructure Engineer to support our Information Technology – Cloud and Infrastructure team.

Position Overview

Reporting to the Manager, Cloud Infrastructure and Security, the Senior Cloud & Infrastructure Engineer is responsible for building, operating, and improving the organization's Microsoft Azure environment and enterprise network. The incumbent works closely with Information Security, Enterprise Applications, Data & Analytics, Project Delivery, and external vendors.

This is a hands‑on senior role with a primary focus on Azure and networking. The incumbent builds and maintains Azure infrastructure using Terraform, configures and supports the enterprise network and firewalls, implements infrastructure security controls, and resolves complex technical issues. The role also owns infrastructure architecture, developed collaboratively with the infrastructure team, and mentors team members. This position has no direct reports.

Key Responsibilities

• Build, operate, and support the organization's Azure environment, including compute, storage, networking, and platform services.
• Deploy and manage Azure resources through Terraform, and maintain modules, state, and coding standards.
• Build and maintain CI/CD pipelines for infrastructure deployment (GitHub or Azure DevOps).
• Manage Azure Governance: management groups, Azure Policy, tagging, and cost management.
• Configure and support Azure Monitor, Azure Backup, and Azure Site Recovery.
• Support cloud migrations and the Azure infrastructure needs of application and data teams.
• Troubleshoot and resolve Azure platform, connectivity, and performance issues.

Networking

• Configure, maintain, and troubleshoot LAN, WAN, and wireless networks across corporate sites.
• Manage firewalls, including policy changes, NAT, site-to-site and remote access VPN.
• Support routing, switching, and SD-WAN.
• Implement and support Azure networking: VNets, peering, NSGs, Private Endpoints, VPN gateways, and Virtual WAN.
• Manage DNS, DHCP, and IP address management across on-premises and Azure.
• Provide secure connectivity for corporate sites, cloud services, remote users, and external partners.
• Plan and carry out network changes and upgrades with minimal disruption to the business.

Security and Identity

• Implement infrastructure security controls such as network segmentation, Azure Firewall, web application firewalls, and Azure Key Vault.
• Apply secure configuration baselines using Defender for Cloud and Azure Policy and lead infrastructure vulnerability remediation.
• Support Entra ID, Conditional Access, and hybrid identity, and integrate infrastructure logging with the organization's SIEM.

Infrastructure

• Support Windows Server, virtualization, storage, and backup, including high availability and disaster recovery.
• Oversee infrastructure monitoring across on-premises and Azure environments.

Architecture and Design

• Own the infrastructure architecture for Azure and the enterprise network, developed collaboratively with the infrastructure team and other IT stakeholders.
• Lead team-based design sessions and architecture reviews for infrastructure and cloud projects.
• Develop technical designs that balance security, availability, performance, and cost.
• Maintain infrastructure standards and reference designs and evaluate new Azure and networking capabilities for recommendation to the Manager.

Senior Technical Support and Projects

• Serve as the senior escalation point for complex infrastructure and network issues.
• Lead the technical implementation of infrastructure and cloud projects, from technical design through to handover to operations.
• Mentor team members and maintain configuration and support documentation.

Qualifications and Skills

Skills and Competencies

• Strong working knowledge of Azure networking, including VNets, NSGs, Private Endpoints, VPN gateways, and hybrid connectivity.
• Proven ability to lead technical implementations and mentor other technical staff.
• Strong problem‑solving skills and sound judgment when planning and making changes to production systems.
• Ability to translate business and project requirements into practical technical designs and clear documentation.
• Strong communication and collaboration skills, including working with IT teams, business stakeholders, vendors, and non-technical audiences.
• Ability to manage multiple priorities and work independently.

Education, Training, and Experience

Mandatory

• University degree or college diploma in Computer Science, Information Technology, or a related field, or an equivalent combination of education and experience.
• Minimum 6-8 years of progressive experience in enterprise infrastructure, including recent hands‑on work in a senior role.
• Demonstrated experience building and supporting production Azure environments in a hybrid setting.
• Production experience with Terraform on Azure.
• Strong hands‑on experience with enterprise networking: routing, switching, firewalls, and VPN.
• Experience troubleshooting complex network issues across on‑premises and cloud environments.
• Experience with infrastructure security, secure configuration baselines, vulnerability remediation, and Entra ID with Conditional Access.
• Experience supporting Windows Server and Hyper‑V or VMware.
• Experience developing infrastructure architecture and technical designs in a collaborative, team‑based setting.

Preferred

• SD-WAN and Azure Virtual WAN
• Azure Backup and Azure Site Recovery Identity governance and Zero Trust architecture
• Azure platform services (App Service, Functions, Logic Apps, API Management)
• Azure data services (Azure SQL, Data Factory, Microsoft Fabric) PowerShell and Bicep
• Security Engineer, Azure Solutions Architect Expert, HashiCorp Terraform Associate, CCNA or CCNP, or ITIL

Travel

• Ability to travel to Mohawk Medbuy offices if required.

As a condition of employment, you are required to submit proof of full COVID-19 vaccination to Human Resources.

MMC is a Healthcare of Ontario Pension Plan (HOOPP) employer offering a comprehensive benefits package and flexible hybrid work options. The targeted salary range for this position is $95,000-$120,000. This job posting is for an existing vacancy.

At MMC, people remain at the center of our hiring process. We may use artificial intelligence (AI) tools to support certain aspects of recruitment, such as sourcing candidates, reviewing applications, analyzing resumes, and summarizing interviews. These tools are designed to assist our recruitment team and do not replace human judgment or decision‑making. Every candidate is reviewed and evaluated by qualified individuals, and all hiring decisions involve meaningful human oversight. We take steps to help ensure our use of AI is appropriate, fair, and consistent with applicable privacy, human rights, and employment laws.

We thank all applicants for their interest; however, only those selected for an interview will be contacted. If contacted for an interview, please inform us should any accommodation be required. Mohawk Medbuy is committed to providing accessible employment practices that comply with the Accessibility for Ontarians with Disabilities Act (AODA).

About US:

Mohawk Medbuy Corporation (MMC) is a national, not‑for‑profit, shared services organization that supports hundreds of health care providers across Canada, as well as child welfare agencies and other public sector organizations. MMC provides value‑driven contracting and procurement solutions for medical/surgical supplies, pharmaceutical products, local sourcing, capital (equipment, FF&E and redevelopment) and nutrition solutions. Other services include data analytics, in‑hospital logistics, warehousing, technology, procure‑to‑pay and accounts payable.

With an emerging focus on sustainability and reconciliation with Indigenous Peoples, MMC is actively supporting the creation of a resilient value chain that incorporates environmental, social and governance best practices. Based in Burlington, ON, the organization also has offices in Toronto, Oakville, Thunder Bay, Kingston, Brantford, London and Chatham, and a distribution centre in Oakville. Learn more: www.mohawkmedbuy.ca.