Senior Infrastructure Architect - Security & Automation

Socket.dev; Toronto; On-site; CAD 103,000 - 157,000; Full time

Job summary

OMERS & Oxford is seeking a Senior Infrastructure Architect to join the combined infrastructure team. You will lead secure infrastructure design across Azure, Google Cloud, and Azure Local, enabling scalable platform solutions while collaborating with cyber security and engineering teams.

This role emphasizes automation, governance, and infrastructure-as-code using Terraform, PowerShell, and GitHub Actions.

Qualifications

• Senior-level experience designing and leading enterprise infrastructure.
• Hands-on Azure, Azure Local, Azure Arc, policy and security controls.
• Infrastructure as code, automation, and source control experience.
• Ability to mentor and lead engineers.
• Excellent stakeholder management and communication.

Responsibilities

• Lead secure infrastructure architecture across Azure, Azure Local, and Google Cloud Platform, plus reference patterns and governance.
• Act as technical lead on Azure Local with automation, resiliency, security hardening and monitoring.
• Define infrastructure governance using Azure Policy, Arc, Defender for Cloud, RBAC, and security controls.
• Collaborate with cyber security and identity teams to translate requirements into practical designs.
• Lead automation practices for infrastructure management including GitHub workflows and secrets handling.
• Guide the use of Terraform, PowerShell, GitHub Actions, and related IaC tools to improve repeatability and security.
• Provide hands-on leadership, design reviews, and escalation support for engineers.
• Work with business groups on platform selection, design inputs, readiness, risk discussions, DR planning, and vendor engagement.

Skills

Hybrid cloud

Azure

Azure Arc

Azure Policy

Defender for Cloud

RBAC

Automation

Terraform

PowerShell

GitHub Actions

Infrastructure governance

Security hardening

Tools

Terraform

PowerShell

GitHub Actions

Job description

Choose a workplace that empowers your impact.

Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be — and deliver — your best.

We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with teams in Toronto to London, New York, Singapore, Sydney and other major cities across North America and Europe. We embody the values of our 665,000 members, placing their best interests at the heart of everything we do.

Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.

Don’t just work anywhere — come build tomorrow together with us.

Role Summary:

This role reports into the Director, Enterprise Systems and Cloud Engineering and is part of a combined infrastructure team that owns architecture, build, and operations across OMERS’ core infrastructure platforms. In this role, you will help lead secure infrastructure design, automation, governance, and operations across Microsoft Azure, Google Cloud Platform, and Azure Local. You will also work to enable internal business and technology groups with secure, scalable platform solutions. This is one of three architect-level roles on the team, each with a distinct focus area. You will be working closely with these peer architects, the Systems Engineering Manager, systems engineers, cyber security, and other technology and business partners to deliver well‑operated infrastructure outcomes.

You will be responsible for:

• Lead secure infrastructure architecture across Azure, Azure Local, Azure Arc-enabled services, and Google Cloud Platform. Typical deliverables include drafting infrastructure standards, reference patterns, operating models, and technical controls.

• Act as one of the technical leads working on Azure Local with Azure ARC - our strategic platform. Includes secure platform design, automating workload placement, resiliency, security hardening and monitoring, and integration with Azure services.

• Define and implement infrastructure governance using Azure Policy, Azure Arc, Defender for Cloud, RBAC, privileged roles, delegated access models, baseline configuration, and platform‑level security controls.

• Partner with cyber security and identity teams to translate enterprise security requirements into practical infrastructure designs, configurations, standards, and operating practices.

• Lead secure automation practices for infrastructure management, including secure scripting standards, repository structure, pull request workflows, code reviews, approvals, secrets handling, reusable automation patterns, and GitHub‑based controls.

• Guide the use of automation and infrastructure‑as‑code tools such as Terraform, PowerShell, GitHub Actions, and related technologies to improve repeatability, auditability, security, and operational efficiency.

• Provide hands‑on technical leadership, design review, mentoring, and escalation support for systems engineers across design, build, implementation, operations and support activities.

• Work with internal business and technology groups on project solutions that rely on infrastructure services, including platform selection, solution design inputs, implementation planning, operational readiness, risk discussions, disaster recovery planning, technical documentation, and vendor engagement.

Required Skills & Experience

• Senior‑level experience designing, implementing, operating, or leading enterprise infrastructure solutions across hybrid cloud, on‑premises platforms, compute, storage, networking, resiliency, governance, and security.

• Strong hands‑on expertise with Microsoft Azure, Azure Local, Azure Arc, Azure Policy, Defender for Cloud, RBAC, monitoring, and infrastructure governance controls.

• Advanced understanding of enterprise operating system architecture for Windows Server and Linux, including infrastructure features such as Windows Failover Clustering, Storage Spaces Direct, Hyper‑V virtualization, Linux server administration concepts, high availability, storage integration, networking, performance, and platform security.

• Experience and proficiency with secure automation, scripting, infrastructure‑as‑code, and source control practices using tools such as GitHub, GitHub Actions, Terraform, PowerShell, pull requests (create/review/merge) and secrets management.

• Ability to provide technical leadership in a combined architecture, engineering/operations team, including mentoring engineers, reviewing designs, supporting implementation, and acting as a senior escalation point.

• Ability to work independently in a high‑performing environment, remain accountable to agreed deadlines, and build strong relationships with internal business groups, technology teams, vendor partners, and external technical resources.

• Strong communication, documentation, stakeholder management, problem‑solving, prioritization, and time management skills, with the ability to build consensus, influence technical and non‑technical partners, manage competing priorities, and align technical solutions to business needs.

Preferred Skills & Experience

• Experience in financial services, pension, investment management, or another regulated enterprise environment.

• Experience with container platforms or modern platform services such as Kubernetes, Docker, AKS, or GKE.

• Experience with technology product evaluation, vendor engagement, platform roadmaps, operational resilience, or disaster recovery planning.

• Relevant Microsoft, Google, security, automation, infrastructure, or DevOps certifications are considered an asset.

We believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other,our flexible hybrid work guideline requires teams to come in to the office 4 days per week.

This posting is for an existing vacancy.The expected salary range for this position is $103,000.00 - $157,000.00 per year.

You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans – details on these elements of compensation are included within OMERS & Oxford offer letters.

As one of Canada’s largest defined benefit pension plans, our people‑first culture is at its best when our workforce reflects the communities where we live and work — and the members we proudly serve.

From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier‑free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs.

Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision‑making remain central to our candidate experience.