Position: Enterprise Cloud Architect with Azure and AWS services Location: Toronto, Canada(Hybrid) Employment Type: Contract Job Description: Design and architect scalable
secure cloud solutions across Azure and AWS.
Build and manage cloud landing zones (
identity
governance
networking
security.
). Lead cloud migration transformation initiatives
including assessments
wave planning
modernization
and execution.
Develop reference architectures
HLDLLD
and cloud design patterns.
Implement and optimize cloud infrastructure compute
storage
networking
load balancing
monitoring.
Deploy and manage PaaS services (
AKSEKS
App Services
Functions Lambda
managed databases.
). Define and enforce cloud security
IAMRBAC
encryption
and governance frameworks.
Architect hybrid connectivity (
VNetVPC
VPN
ExpressRoute Direct Connect.
). Drive automation using Terraform
BicepARM
CloudFormation
and CICD pipelines.
Collaborate with DevOps
Security
and Application teams provide technical leadership.
Essential Skills: More than 10+ years in cloud architecture
infrastructure
or platform engineering.
Deep hands-on experience with Azure and AWS services.
Good experience in designing a multi-cloud architecture spanning (
Azure
AWS
and GCP with unified governance and cost management.
). Strong background in cloud migration
modernization
and transformation programs.
Relevant certifications (Azure AWS Architect| Terraform Associate). Experience with FinOps practices tagging strategy
chargeback models
and multi-cloud cost analytics.
Ability to design and deploy an Azure Enterprise-Scale Landing Zone with Hub-Spoke / VWAN topology.
proficient with AKS private clusters
AAD integration
ingress
KEDA autoscaling
and GitOps.
Knowledge of Azure Entra ID Conditional Access
PIM
Managed Identities
and B2B/B2C federation.
ability to design multi-account AWS environments with AWS Organizations
SCPs
and Transit Gateway networking.
proficient with AWS container/serverless workloads EKS
Fargate
Lambda
and event-driven patterns.
Experience in designing a GCP Shared VPC
GKE Autopilot workplace with IAM hierarchy governance.
experience with GCP data/analytics services BigQuery
Dataflow
Pub/Sub
and Looker.
ability to design OCI VCN architectures with DRG
FastConnect
and compute fleet sizing.
experience with OCI Autonomous DB
Exadata Cloud
and Oracle DB migrations.
Experience with design hybrid connectivity (ExpressRoute / Direct Connect / FastConnect) with BGP and failover.
SD-WAN and network virtualization experience (
NSX-T
VXLAN
overlay architectures.
). IAM/PAM design expertise least-privilege
CyberArk/BeyondTrust
and federated identity (SAML/OIDC).
experience with CSPM tools (
Defender for Cloud
Prisma Cloud
Wiz.
) and posture remediation. ability to map cloud controls to compliance frameworks (
ISO 27001
SOC 2
PCI-DSS
) for audit readiness. Terraform / Bicep / CDK proficiency module design
remote state
policy gates
and cross-provider IaC.
experienced with building CI/CD pipelines with GitHub Actions / Azure DevOps and GitOps (ArgoCD/Flux).
design a multi-cloud observability strategy using Azure Monitor
Datadog.
design and deploy Generative AI / LLM solutions (
Azure OpenAI
AWS Bedrock
Vertex AI Gemini
) with RAG. MLOps maturity model registry
feature stores
training pipelines
and inference endpoint governance.
experienced with Edge / IoT architectures (
Azure IoT Edge
AWS Greengrass
GCP Edge
) and cloud-to-edge pipelines. Excellent communication
requirement analysis
documentation
and presentation skills