Senior Azure Platform Engineer

On behalf of our client, TEEMA is recruiting for a Senior Azure Platform Engineer. This is a Permanent Opportunity and candidates must be comfortable working a hybrid model in Richmond, BC.The ideal candidate has built or substantially redesigned a large, production Azure environment spanning multiple subscriptions, workloads, teams, or business groups. They can assess an existing Azure estate, identify structural and operational risks, define a practical target architecture, and personally help implement the required improvements using infrastructure as code and modern engineering practices.What you’ll do
Design, implement, and continually improve enterprise Azure landing zones, management groups, subscription structures, and platform and workload landing-zone patterns.Define and implement Azure governance standards, including Azure Policy, naming, tagging, approved regions and services, configuration requirements, exemptions, and compliance reporting.Design secure identity and access models using Microsoft Entra ID, Azure RBAC, Privileged Identity Management, managed identities, service principals, and least-privilege administration.Architect enterprise Azure networking, including virtual networks, routing, segmentation, hub-and-spoke connectivity, Azure Firewall, network security groups, Private Link, Private Endpoints, DNS, VPN, and ExpressRoute.Partner with cybersecurity to implement Microsoft Defender for Cloud, Key Vault, secure administration, logging, auditing, security baselines, and configuration controls.Develop and maintain reusable infrastructure-as-code modules using Terraform and/or Bicep, supported by Git-based review, testing, and deployment pipelines in Azure DevOps or GitHub.Establish Azure Monitor, Log Analytics, diagnostic settings, alerting, centralized logging, service health, platform capacity, quota, backup, resilience, and disaster-recovery standards.Support incident investigation, root-cause analysis, platform problem management, remediation, and the development of operational runbooks.Improve Azure cost visibility and resource optimization using subscription and tagging structures, Azure Cost Management, reservations, savings plans, and practical FinOps disciplines.Create reference architectures, technical standards, implementation patterns, architecture decision records, and platform roadmaps.Review and challenge third-party Azure designs, and provide technical guidance to internal teams and operating businesses.What are we looking for:
Demonstrated ownership of a complex, production Azure environment spanning multiple subscriptions, workload teams, or business groups.Direct experience designing or implementing Azure Landing Zones and applying the Microsoft Cloud Adoption Framework and Azure Well-Architected principles.Deep hands-on knowledge of Azure networking, Microsoft Entra ID, Azure RBAC, Privileged Identity Management, Azure Policy, Microsoft Defender for Cloud, Key Vault, Azure Monitor, and Log Analytics.Strong practical capability with Terraform and/or Bicep, PowerShell or Azure CLI, Git, and CI/CD pipelines.Experience with hybrid connectivity, platform security, monitoring, backup, recovery, resilience, and production operational support.Ability to move comfortably between architecture strategy, detailed engineering, implementation, and troubleshooting.Excellent written and verbal communication skills, including the ability to explain architecture decisions, risks, costs, and technical trade-offs to technical and non-technical audiences.Strong judgment, ownership, collaboration, documentation, and stakeholder-management skills.Ability to balance enterprise security and governance requirements with delivery practicality and the autonomy of a decentralized group of businesses.Education and Experience
Undergraduate degree in computer science, engineering, information systems, technology, or a related discipline, or an equivalent combination of education and experience.Approximately ten or more years of progressive infrastructure, cloud, or platform experience, including at least five years of substantial Microsoft Azure architecture and engineering responsibility.Microsoft Certified: Azure Solutions Architect Expert is strongly preferred.Azure Administrator Associate, Azure Network Engineer Associate, Azure Security Engineer Associate, DevOps Engineer Expert, and relevant Terraform certifications are considered assets.
#J-18808-Ljbffr