Overview The Azure Infrastructure Architect is a hands-on consulting architect who designs and delivers the Azure infrastructure foundations that data, analytics and AI programs run on: landing zones and governance, hub-and-spoke networking, infrastructure as code, security, and platform administration for Microsoft Fabric and Databricks. You will work directly with client IT, networking and security teams, serve as the infrastructure technical lead on delivery projects, and support pre-sales, proposals and migrations.

Primary Location:

Across Canada

Work Model:

Hybrid 2-Days Onsite

Employment Type:

Permanent Full-Time

Vacancy Status:

Backfill

Compensation Range:

$120,000 - $145,000 CAD

RESPONSIBILITIES

Design and deploy secure, scalable Azure subscriptions, landing zones, resource providers, naming conventions and tagging standards

Establish Azure governance using Azure Policy, cost budgets, alerts and FinOps guardrails

Implement least-privilege, scoped and time-bound RBAC access across delivery and client teams

Design and build hub-and-spoke Azure network architectures, including VNets, subnets, private endpoints and delegated services

Configure ExpressRoute and VPN connectivity, VNet peering, remote gateways, NSGs, UDRs, Azure Firewall and third-party network virtual appliances such as Fortinet

Configure private DNS, conditional forwarding and static egress through NAT Gateway to support secure hybrid connectivity and vendor allowlisting

Lead end-to-end network connectivity testing, troubleshooting and remediation

Develop reusable Terraform modules for networking, security, monitoring and data-platform infrastructure, leveraging Bicep/ARM where appropriate





Build CI/CD pipelines using GitHub Actions or Azure DevOps with OIDC federated credentials and appropriate environment approvals

Maintain secure infrastructure-as-code practices across Dev, Test and Prod environments, including remote state management and recovery runbooks

Administer Microsoft Fabric capacity, tenant settings, security groups, private connectivity, managed private endpoints, trusted workspace access and outbound access controls

Design and implement on-premises and VNet data gateway solutions based on client architecture and availability requirements

Advise on Databricks workspace architecture, including cluster policies, Unity Catalog governance, access controls and CI/CD

Provision and support infrastructure for Azure AI and agent-based solutions

Configure and manage Azure Key Vault, Microsoft Defender for Cloud, Entra ID security groups and managed identities

Establish monitoring and operational capabilities using Log Analytics, Azure Monitor, diagnostic settings and Fabric capacity metrics

Support workload migrations to Azure and Microsoft 365/Entra tenant-to-tenant migrations

Contribute to Azure VMware Solution assessments and cloud modernization initiatives

Lead architecture and networking design sessions with clients and define clear roles and responsibilities through RACI frameworks





Review client environments and technical artifacts to identify risks, gaps and architectural anti-patterns, and recommend appropriate mitigations

Coach client platform and engineering teams on Azure infrastructure, security, governance and operational best practices

Support pre-sales activities, including proposals, SOWs, technical estimates and solution documentation

Serve as a trusted infrastructure technical lead across client, Data, AI and delivery teams

QUALIFICATIONS, SKILLS & EXPERIENCE

5+ years of hands‑on experience in cloud or enterprise infrastructure engineering or architecture, with deep Microsoft Azure expertise

Robust hands‑on experience with Azure networking, including hub‑and‑spoke architectures, ExpressRoute, VPN, private endpoints, private DNS, NSGs, UDRs and firewalls

Production experience building infrastructure as code using Terraform and/or Bicep

Hands‑on experience implementing CI/CD for infrastructure using GitHub Actions and/or Azure DevOps

Strong understanding of Azure governance, Azure Policy, RBAC and cost management

Experience with Microsoft Entra ID, managed identities, Azure Key Vault and Microsoft Defender for Cloud

Experience provisioning and supporting infrastructure for data platforms such as Microsoft Fabric, Azure Data services and/or Databricks

Experience implementing monitoring and operational capabilities using Azure Monitor, Log Analytics and diagnostic settings

Strong understanding of cloud security, private networking and least‑privilege access principles

Consulting or client‑facing delivery experience with the

📌 Cloud Infrastructure Architect (Toronto)
🏢 Adastra
📍 Toronto