Speridian is a global business and technology solutions provider, we help clients modernize their businesses through Digital Transformation. At our core, we are an Information technology consulting and services company with a proven track record of solving business challenges with our unique, industry-based consultative approach. We achieve excellent results by partnering with talented people.

Key Duties and Responsibilities

Azure Cloud Landing Zone & Platform Engineering

- Design, implementation, and ongoing enhancement of the Azure Cloud Landing Zone, including core platform services, governance guardrails, identity integration, network connectivity, subscription design, and operational controls.
- Design, deploy, manage, and maintain cloud infrastructure and shared services across Azure environments in alignment with enterprise architecture, security, and operational requirements.
- Contribute to the target-state cloud platform roadmap and blueprint, driving modernization initiatives that systematically transition complex, monolithic on-premises infrastructure to cloud-native architectures.

· Design, provision, and manage Azure API Management (APIM) in enterprise environments, covering the full API lifecycle (design, deployment, monetization, and retirement).

· Evaluate emerging services and cloud methodologies, conducting architectural assessments to determine feasibility, cost-impact, and integration requirements for business units.

Cloud Development & DevOps Enablement

- Establish and enforce robust cloud security guardrails and compliance baselines using Azure Policy, Blueprints, and Microsoft Defender for Cloud.
- Manage enterprise Identity and Access Management (IAM) structures, leveraging Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, and zero-trust security frameworks.
- Lead vulnerability management and threat remediation efforts across the platform, collaborating with the Security Operations Center (SOC) to patch, harden, and secure platform resources.
- Automated deployment patterns using Infrastructure as Code and embed automated security controls (SecOps/DevSecOps)



directly into continuous integration and continuous deployment (CI/CD) pipelines to achieve shift-left security validation.
- Collaborate with application development teams to accelerating delivery while ensuring alignment with platform security guardrails.
- Conduct comprehensive technical dependency mapping and risk assessments on legacy workloads to engineer secure, efficient cloud migration.
- Work with internal teams and vendors to maintain service continuity and minimize business disruption during infrastructure changes, platform upgrades, and migration activities.

Operations, Monitoring & Security

- Design and test enterprise Business Continuity and Disaster Recovery (BCDR) plans, leveraging cloud services such as Azure Backup and Site Recovery to meet RTO and RPO.
- Design and support enterprise monitoring, alerting, and operational response capabilities for security, performance and service health across cloud platforms.
- Assist in vulnerability remediation, patch planning, and security issue resolution across cloud, server, and network platforms.
- Prepare and maintain technical documentation covering cloud services, platform configurations, integrations, policies, security and support procedures.
- Provide reporting and metrics related to cloud services, platform health, security and compliance.

Relationship Management

· Work collaboratively with IT, security, enterprise architecture, digital/application teams, and vendors to identify opportunities to improve operations and support business objectives through technology.

· Provide technical guidance and recommendations on cloud technologies, implementation options, support models, and best practices.

· Maintain strong working relationships with stakeholders and service providers to support solution delivery, issue resolution, quality of service,



and continuous improvement.

Qualifications

· Undergraduate degree in Computer Science, Information Security, Cloud engineering, or a related discipline, or an equivalent combination of education and experience.

· Minimum 7-10 years of enterprise-level experience in infrastructure services, cloud engineering with strong focus on Microsoft Azure.

· Expertise in Azure Governance and Security tools, including hands-on experience authoring custom Azure Policies, managing Microsoft Defender for Cloud, and implementing Zero-Trust network micro-segmentation.

· Deep understanding of Cloud Identity and Access Management (IAM), Active Director/Microsoft Entra ID (Azure AD), Privileged Identity Management (PIM), Conditional Access, Role-Based Access Control (RBAC), and federated identity standards.

· Advanced knowledge of Azure Networking topologies, including Hub-and-Spoke networks, Azure Virtual WAN (vWAN), ExpressRoute, Azure Firewalls, Application Gateways, and secure hybrid routing patterns

· Familiarity with backup/recovery, service continuity, and disaster recovery concepts and implementation.

· Experience with vulnerability management, change management, incident management, and operational support processes across infrastructure and cloud services.

· Expert knowledge of Infrastructure as Code and automation using tools such as GitHub, Bicep, Terraform, and PowerShell.

· Expert knowledge of DevOps and SecOps practices, including agile ways of working and support for continuous improvement.

· Strong understanding of infrastructure and platform security, including vulnerability scanning, patch management protocols, certificate lifecycles, and API endpoint hardening.

· Excellent analytical, troubleshooting, and problem-solving skills, with the ability to prioritize effectively in a fast-paced environment.

· Robust collaboration, stakeholder management, documentation, and customer service skills.

Pay: From $90.00 per hour

Benefits:

- Dental care
- Extended health care
- Paid time off
- Vision care

Work Location: Hybrid remote in Toronto, ON

📌 Cloud & Platform Engineer (Toronto)
🏢 Speridian Technologies Canada
📍 Toronto