Landing Zone Engineer – Azure Cloud Migration

Location: Remote – Toronto/Ontario Preferred (Eastern Time Zone)

Employment Type: Contract

Contract Duration: 5 Months

Start Date: December 2026

Work Schedule: 37.5 Hours per Week (7.5 Hours per Day)

Position Overview

We are seeking an experienced Landing Zone Engineer – Azure Cloud Migration to support a large-scale enterprise VMware-to-Microsoft Azure migration initiative.

The successful candidate will be responsible for engineering, extending, and maintaining an existing Azure Landing Zone built using Terraform , ensuring the cloud infrastructure, networking, security, governance, and shared services are ready to support migration activities.

Working closely with the Landing Zone Architect, cloud engineering teams, migration specialists, and network teams, this individual will develop and implement infrastructure-as-code (IaC) solutions within an established Azure environment.

The existing landing zone will be extended to support migration-specific requirements, including network spokes, subscriptions, Azure Policy, shared SQL infrastructure, Oracle application connectivity, Citrix, and disaster recovery capabilities .

This is a hands-on engineering role requiring strong expertise in Microsoft Azure, Terraform, Azure networking, GitHub Actions, infrastructure automation, and enterprise cloud migration environments .

Key Responsibilities

Azure Landing Zone Engineering & Infrastructure Development

- Build, configure, and extend Azure Landing Zone components using Terraform, including:
- Azure subscriptions and management group placement.
- Spoke virtual networks (VNets) and subnets.
- Network Security Groups (NSGs) and route tables.
- Hub-and-spoke networking and VNet peering.
- Private endpoints and Private DNS.
- Develop, maintain, and enhance reusable Terraform modules supporting migrated workloads, following established repository structures, coding standards, and module conventions.
- Implement Azure governance and security configurations as code, including Azure Policy assignments, Role-Based Access Control (RBAC), tagging, and diagnostic settings.
- Work within existing client GitHub repositories and collaborate with cloud engineering teams to ensure consistent infrastructure deployment practices.

Shared Services, Database Connectivity & Citrix Infrastructure

- Engineer and deploy the shared SQL farm landing zone and associated disaster recovery configurations using Terraform, based on architectural designs.
- Implement network, DNS, and access configurations required to connect migrated applications to Oracle databases hosted on Azure.
- Collaborate with database platform teams responsible for the Oracle infrastructure.
- Build and configure Citrix landing zone components, including NetScaler networking and routing through centralized hub firewalls.
- Ensure shared infrastructure services are properly integrated with the Azure Landing Zone architecture.

Disaster Recovery & Business Continuity

- Implement disaster recovery infrastructure patterns and configurations through Terraform.
- Configure paired-region networking, Azure Site Recovery components, and backup policies.
- Support infrastructure resilience, recovery readiness, and consistency across cloud environments.

Terraform, Automation & DevOps

- Develop and execute infrastructure deployments through GitHub Actions pipelines across development,



System Integration Testing (SIT), User Acceptance Testing (UAT), and production environments.
- Manage infrastructure changes through pull requests, code reviews, and established release procedures.
- Maintain Terraform remote state using Azure Storage, including state locking, resource imports, and state refactoring.
- Perform Terraform state management activities using moved blocks, import blocks, and Terraform state commands.
- Import migrated virtual machines and supporting Azure resources into Terraform following migration cutovers.
- Identify and resolve infrastructure configuration drift.
- Follow formal production change management procedures, including Change Advisory Board (CAB) approvals and scheduled change windows.

Migration Readiness & Technical Support

- Prepare target Azure environments ahead of scheduled migration waves.
- Ensure required subnets, DNS records, firewall rule requests, network connectivity, and access configurations are established before workload cutovers.
- Collaborate with migration engineers, network teams, architects, and Microsoft support to troubleshoot infrastructure deployment and connectivity issues.
- Investigate and resolve routing, DNS, network security, and infrastructure provisioning problems.
- Support migration teams in ensuring environments are operationally ready for each migration phase.

Documentation & Knowledge Transfer

- Develop and maintain technical documentation, including Terraform module READMEs, infrastructure design notes, and operational runbooks.
- Document deployment processes, infrastructure configurations, and troubleshooting procedures.
- Ensure solutions are maintainable and can be effectively supported by internal engineering and operations teams following project handover.

Required Qualifications & Technical Experience Microsoft Azure Platform

- Minimum 5+ years of infrastructure engineering experience, including at least 3 years designing, building, or engineering Azure environments for enterprise organizations.
- Hands-on experience working with Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework (CAF).
- Strong understanding of Azure management groups, subscriptions, Azure Policy, and RBAC.
- Working knowledge of Azure compute, storage, Key Vault, Recovery Services, and Log Analytics.
- Experience engineering and extending existing enterprise Azure environments.

Azure Networking

- Strong hands-on experience with Azure networking technologies, including:
- Hub-and-spoke network architectures.
- Virtual networks, subnets, and VNet peering.
- User-defined routes (UDRs) and Network Security Groups (NSGs).
- Private endpoints and Private DNS.
- Azure Application Gateway.
- Understanding of network traffic flows through centralized firewall infrastructure, including Palo Alto firewalls or Azure Firewall.
- Ability to investigate and troubleshoot routing and connectivity issues using Azure Network Watcher and NSG flow logs.
- Strong networking fundamentals, including TCP/IP, subnetting, DNS,



and Network Address Translation (NAT).

Terraform & Infrastructure Automation

- Minimum 3+ years of hands-on production Terraform experience within Microsoft Azure, using the AzureRM provider.
- Demonstrated experience developing and maintaining reusable Terraform modules, rather than solely consuming existing modules.
- Strong knowledge of Terraform state management, including:
- Remote state storage and locking.
- Terraform import and import blocks.
- State refactoring using moved blocks and terraform state mv.
- Experience with Azure Verified Modules or other public Terraform Registry modules, including module version pinning.
- Experience using GitHub and GitHub Actions for infrastructure deployment pipelines.
- Familiarity with pull request workflows, code reviews, and infrastructure change control.
- Proficiency with PowerShell and Azure CLI.
- Python scripting experience is considered an asset.

Professional & Collaboration Requirements

- Comfortable working within established enterprise cloud environments, existing codebases, and defined engineering conventions.
- Experience operating within formal IT change management processes, including CAB approvals and scheduled change windows.
- Ability to maintain accurate technical documentation, change tickets, and implementation records.
- Strong written communication skills and the ability to collaborate effectively with cloud engineers, infrastructure teams, and technical architects.
- Ability to work independently while contributing to a broader enterprise migration program.
- Post-secondary degree in Computer Science, Information Systems, Engineering, or a related technical discipline.

Nice-to-Have Qualifications

- Experience with Azure Bicep.
- Experience with Azure Migrate or Azure Site Recovery.
- Experience with SQL Server on Azure Virtual Machines or Azure SQL Managed Instance, including high availability and disaster recovery configurations.
- Familiarity with Oracle workloads on Azure, including Oracle on Azure VMs or Oracle Database@Azure, particularly from a networking and integration perspective.
- Experience with Citrix, NetScaler, or Azure Virtual Desktop in Microsoft Azure.
- Familiarity with Azure Virtual Network Manager.
- Previous experience supporting Canadian public-sector organizations or large enterprise environments.
- Relevant technical certifications, including:
- Microsoft Certified: Azure Administrator Associate (AZ-104).
- Microsoft Certified: Azure Network Engineer Associate (AZ-700).
- HashiCorp Certified: Terraform Associate.

What We're Looking For The ideal candidate is a hands-on Azure infrastructure engineer with deep Terraform expertise , capable of extending an established enterprise Azure Landing Zone to support a complex VMware-to-Azure migration. Success in this role requires robust Azure networking knowledge, infrastructure-as-code development experience, disciplined change management practices, and the ability to work collaboratively with architects and migration teams.

The successful individual will demonstrate a commitment to technical quality, integrity, respect, collaboration, continuous improvement, and effective service delivery.

Candidates with direct experience engineering Azure Landing Zones, developing Terraform modules, and supporting enterprise cloud migration programs are strongly encouraged to apply. ,

📌 Landing Zone Engineer – Azure Cloud Migration (36172) (Canada)
🏢 Myticas Consulting
📍 Canada