Senior Infrastructure Architect - Security & Automation

OMERS; Toronto; Hybrid; CAD 103,000 - 157,000; Full time

Benefits offered by this job

Incentive plan

Group benefits

Retirement plan

Hybrid work model

Job summary

OMERS is seeking a Senior Infrastructure Architect to lead secure infrastructure design across multi-cloud platforms. You will drive governance, automation, and scalable platform solutions in a hybrid environment.

The role collaborates with security, engineering, and business teams to deliver well-operated infrastructure outcomes. You will mentor engineers, review designs, and provide escalation support while shaping platform standards, policies, and disaster recovery planning for OMERS and its

Qualifications

• Senior-level experience designing, implementing, operating, or leading enterprise infrastructure solutions.
• Strong hands-on expertise with Azure, Arc, Policy, Defender for Cloud and RBAC.
• Experience with infrastructure governance, security hardening, and monitoring.
• Proficiency in automation, IaC, scripting, and source control.

Responsibilities

• Lead secure infrastructure architecture across Azure, Azure Local, Azure Arc-enabled services, and Google Cloud Platform.
• Act as technical lead on Azure Local with Azure ARC, including secure design and workload placement automation.
• Define and implement governance using Azure Policy, Arc, Defender for Cloud, RBAC, and security controls.
• Partner with cyber security to translate requirements into practical designs and practices.
• Lead secure automation practices and ensure code reviews, PRs, and secrets handling.
• Guide use of Terraform, PowerShell, GitHub Actions to improve repeatability and security.
• Provide hands-on leadership, design reviews, and escalation support for engineers.
• Collaborate with business groups on projects involving platform selection and disaster recovery.

Skills

Azure

Azure Local

Azure Arc

Azure Policy

Defender for Cloud

RBAC

Terraform

PowerShell

GitHub Actions

Automation

Security hardening

Tools

GitHub

Terraform

PowerShell

Job description

Choose a workplace that empowers your impact.

Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be — and deliver — your best.

We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with teams in Toronto to London, New York, Singapore, Sydney and other major cities across North America and Europe. We embody the values of our 665,000 members, placing their best interests at the heart of everything we do.

Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.

Don’t just work anywhere — come build tomorrow together with us.

Know someone at OMERS or Oxford Properties? Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.

Role Summary

This role reports into the Director, Enterprise Systems and Cloud Engineering and is part of a combined infrastructure team that owns architecture, build, and operations across OMERS’ core infrastructure platforms. In this role, you will help lead secure infrastructure design, automation, governance, and operations across Microsoft Azure, Google Cloud Platform, and Azure Local. You will also work to enable internal business and technology groups with secure, scalable platform solutions. This is one of three architect-level roles on the team, each with a distinct focus area. You will be working closely with these peer architects, the Systems Engineering Manager, systems engineers, cyber security, and other technology and business partners to deliver well-operated infrastructure outcomes.

You Will Be Responsible For

• Lead secure infrastructure architecture across Azure, Azure Local, Azure Arc-enabled services, and Google Cloud Platform. Typical deliverables include drafting infrastructure standards, reference patterns, operating models, and technical controls.
• Act as one of the technical leads working on Azure Local with Azure ARC - our strategic platform. Includes secure platform design, automating workload placement, resiliency, security hardening and monitoring, and integration with Azure services.
• Define and implement infrastructure governance using Azure Policy, Azure Arc, Defender for Cloud, RBAC, privileged roles, delegated access models, baseline configuration, and platform-level security controls.
• Partner with cyber security and identity teams to translate enterprise security requirements into practical infrastructure designs, configurations, standards, and operating practices.
• Lead secure automation practices for infrastructure management, including secure scripting standards, repository structure, pull request workflows, code reviews, approvals, secrets handling, reusable automation patterns, and GitHub-based controls.
• Guide the use of automation and infrastructure-as-code tools such as Terraform, PowerShell, GitHub Actions, and related technologies to improve repeatability, auditability, security, and operational efficiency.
• Provide hands-on technical leadership, design review, mentoring, and escalation support for systems engineers across design, build, implementation, operations and support activities.
• Work with internal business and technology groups on project solutions that rely on infrastructure services, including platform selection, solution design inputs, implementation planning, operational readiness, risk discussions, disaster recovery planning, technical documentation, and vendor engagement.

Required Skills & Experience

• Senior-level experience designing, implementing, operating, or leading enterprise infrastructure solutions across hybrid cloud, on-premises platforms, compute, storage, networking, resiliency, governance, and security.
• Strong hands-on expertise with Microsoft Azure, Azure Local, Azure Arc, Azure Policy, Defender for Cloud, RBAC, monitoring, and infrastructure governance controls.
• Advanced understanding of enterprise operating system architecture for Windows Server and Linux, including infrastructure features such as Windows Failover Clustering, Storage Spaces Direct, Hyper‑V virtualization, Linux server administration concepts, high availability, storage integration, networking, performance, and platform security.
• Experience and proficiency with secure automation, scripting, infrastructure-as-code, and source control practices using tools such as GitHub, GitHub Actions, Terraform, PowerShell, pull requests (create/review/merge) and secrets management.
• Ability to provide technical leadership in a combined architecture, engineering/operations team, including mentoring engineers, reviewing designs, supporting implementation, and acting as a senior escalation point.
• Ability to work independently in a high-performing environment, remain accountable to agreed deadlines, and build strong relationships with internal business groups, technology teams, vendor partners, and external technical resources.
• Strong communication, documentation, stakeholder management, problem-solving, prioritization, and time management skills, with the ability to build consensus, influence technical and non‑technical partners, manage competing priorities, and align technical solutions to business needs.

Preferred Skills & Experience

• Experience in financial services, pension, investment management, or another regulated enterprise environment.
• Experience with container platforms or modern platform services such as Kubernetes, Docker, AKS, or GKE.
• Experience with technology product evaluation, vendor engagement, platform roadmaps, operational resilience, or disaster recovery planning.
• Relevant Microsoft, Google, security, automation, infrastructure, or DevOps certifications are considered an asset.

We believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other, our flexible hybrid work guideline requires teams to come in to the office 4 days per week.

This posting is for an existing vacancy.

The expected salary range for this position is $103,000.00 - $157,000.00 per year.

You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans – details on these elements of compensation are included within OMERS & Oxford offer letters.

As one of Canada’s largest defined benefit pension plans, our people-first culture is at its best when our workforce reflects the communities where we live and work — and the members we proudly serve.

From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our Purpose@Work committee and employee recognition programs.

Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision-making remain central to our candidate experience.