On behalf of our client, TEEMA is recruiting for a Senior Azure Platform Engineer. This is a Permanent Opportunity and candidates must be comfortable working a hybrid model in Richmond, BC.
The ideal candidate has built or substantially redesigned a large, production Azure environment spanning multiple subscriptions, workloads, teams, or business groups. They can assess an existing Azure estate, identify structural and operational risks, define a practical target architecture, and personally help implement the required improvements using infrastructure as code and modern engineering practices.
What you’ll do
- Design, implement, and continually improve enterprise Azure landing zones, management groups, subscription structures, and platform and workload landing-zone patterns.
- Define and implement Azure governance standards, including Azure Policy, naming, tagging, approved regions and services, configuration requirements, exemptions, and compliance reporting.
- Design secure identity and access models using Microsoft Entra ID, Azure RBAC, Privileged Identity Management, managed identities, service principals, and least-privilege administration.
- Architect enterprise Azure networking, including virtual networks, routing, segmentation, hub-and-spoke connectivity, Azure Firewall, network security groups, Private Link, Private Endpoints, DNS, VPN, and ExpressRoute.
- Partner with cybersecurity to implement Microsoft Defender for Cloud, Key Vault, secure administration, logging, auditing, security baselines, and configuration controls.
- Develop and maintain reusable infrastructure-as-code modules using Terraform and/or Bicep, supported by Git-based review, testing, and deployment pipelines in Azure DevOps or GitHub.
- Establish Azure Monitor, Log Analytics, diagnostic settings, alerting, centralized logging, service health, platform capacity, quota, backup, resilience, and disaster-recovery standards.
- Support incident investigation, root-cause analysis, platform problem management, remediation, and the development of operational runbooks.
- Improve Azure cost visibility and resource optimization using subscription and tagging structures, Azure Cost Management, reservations, savings plans, and practical FinOps disciplines.
- Create reference architectures, technical standards, implementation patterns, architecture decision records, and platform roadmaps.
- Review and challenge third-party Azure designs, and provide technical guidance to internal teams and operating businesses.
What are we looking for:
- Demonstrated ownership of a complex, production Azure environment spanning multiple subscriptions, workload teams, or business groups.
- Direct experience designing or implementing Azure Landing Zones and applying the Microsoft Cloud Adoption Framework and Azure Well-Architected principles.
- Deep hands-on knowledge of Azure networking, Microsoft Entra ID, Azure RBAC, Privileged Identity Management, Azure Policy, Microsoft Defender for Cloud, Key Vault, Azure Monitor, and Log Analytics.
- Strong practical capability with Terraform and/or Bicep, PowerShell or Azure CLI, Git, and CI/CD pipelines.
- Experience with hybrid connectivity, platform security, monitoring, backup, recovery, resilience, and production operational support.
- Ability to move comfortably between architecture strategy, detailed engineering, implementation, and troubleshooting.
- Excellent written and verbal communication skills, including the ability to explain architecture decisions, risks, costs, and technical trade-offs to technical and non-technical audiences.
- Strong judgment, ownership, collaboration, documentation, and stakeholder-management skills.
- Ability to balance enterprise security and governance requirements with delivery practicality and the autonomy of a decentralized group of businesses.
Education and Experience
- Undergraduate degree in computer science, engineering, information systems, technology, or a related discipline, or an equivalent combination of education and experience.
- Approximately ten or more years of progressive infrastructure, cloud, or platform experience, including at least five years of substantial Microsoft Azure architecture and engineering responsibility.
- Microsoft Certified: Azure Solutions Architect Expert is strongly preferred.
- Azure Administrator Associate, Azure Network Engineer Associate, Azure Security Engineer Associate, DevOps Engineer Expert, and relevant Terraform certifications are considered assets.
