5+ years of hands-on experience in cloud or enterprise infrastructure engineering or architecture, with deep Microsoft Azure expertise
Strong hands-on experience with Azure networking, including hub-and-spoke architectures, ExpressRoute, VPN, private endpoints, private DNS, NSGs, UDRs and firewalls
Production experience building infrastructure as code using Terraform and/or Bicep
Hands-on experience implementing CI/CD for infrastructure using GitHub Actions and/or Azure DevOps
Strong understanding of Azure governance, Azure Policy, RBAC and cost management
Experience with Microsoft Entra ID, managed identities, Azure Key Vault and Microsoft Defender for Cloud
Experience provisioning and supporting infrastructure for data platforms such as Microsoft Fabric, Azure Data services and/or Databricks
Experience implementing monitoring and operational capabilities using Azure Monitor, Log Analytics and diagnostic settings
Strong understanding of cloud security, private networking and least-privilege access principles
Consulting or client-facing delivery experience with the ability to move seamlessly between architecture, advisory and hands-on implementation
Proven ability to lead technical discussions and troubleshoot complex infrastructure and connectivity challenges
Strong written and verbal communication skills with the ability to create clear architecture, operational and technical documentation
Nice to have
Microsoft certifications such as AZ-104, AZ-305, AZ-700, AZ-400 and/or DP-600
HashiCorp Terraform Associate certification
Databricks certification
Hands-on Microsoft Fabric administration experience, including capacity management, gateways, private networking and security features
Experience with Microsoft 365 and Entra tenant-to-tenant migrations
Experience with Azure VMware Solution assessments or implementations
Experience supporting Azure OpenAI and/or Azure AI Foundry infrastructure
Exposure to Agent365
Exposure to AWS environments
Experience supporting client penetration testing findings and remediation
Full description
Overview
The Azure Infrastructure Architect is a hands-on consulting architect who designs and delivers the Azure infrastructure foundations that data, analytics and AI programs run on: landing zones and governance, hub-and-spoke networking, infrastructure as code, security, and platform administration for Microsoft Fabric and Databricks. You will work directly with client IT, networking and security teams, serve as the infrastructure technical lead on delivery projects, and support pre-sales, proposals and migrations.
Primary Location: Across Canada
Work Model: Hybrid 2-Days Onsite
Employment Type: Permanent Full-Time
Vacancy Status: Backfill
Compensation Range: $120,000 - $145,000 CAD
RESPONSIBILITIES
Design and deploy secure, scalable Azure subscriptions, landing zones, resource providers, naming conventions and tagging standards
Establish Azure governance using Azure Policy, cost budgets, alerts and FinOps guardrails
Implement least-privilege, scoped and time-bound RBAC access across delivery and client teams
Design and build hub-and-spoke Azure network architectures, including VNets, subnets, private endpoints and delegated services
Configure ExpressRoute and VPN connectivity, VNet peering, remote gateways, NSGs, UDRs, Azure Firewall and third-party network virtual appliances such as Fortinet
Configure private DNS, conditional forwarding and static egress through NAT Gateway to support secure hybrid connectivity and vendor allowlisting
Lead end-to-end network connectivity testing, troubleshooting and remediation
Develop reusable Terraform modules for networking, security, monitoring and data-platform infrastructure, leveraging Bicep/ARM where appropriate
Build CI/CD pipelines using GitHub Actions or Azure DevOps with OIDC federated credentials and appropriate environment approvals
Maintain secure infrastructure-as-code practices across Dev, Test and Prod environments, including remote state management and recovery runbooks
Administer Microsoft Fabric capacity, tenant settings, security groups, private connectivity, managed private endpoints, trusted workspace access and outbound access controls
Design and implement on-premises and VNet data gateway solutions based on client architecture and availability requirements
Advise on Databricks workspace architecture, including cluster policies, Unity Catalog governance, access controls and CI/CD
Cloud Infrastructure Architect at Adastra Corporation (Toronto, ON, CA) — aijobsearch
Provision and support infrastructure for Azure AI and agent-based solutions
Configure and manage Azure Key Vault, Microsoft Defender for Cloud, Entra ID security groups and managed identities
Establish monitoring and operational capabilities using Log Analytics, Azure Monitor, diagnostic settings and Fabric capacity metrics
Support workload migrations to Azure and Microsoft 365/Entra tenant-to-tenant migrations
Contribute to Azure VMware Solution assessments and cloud modernization initiatives
Lead architecture and networking design sessions with clients and define clear roles and responsibilities through RACI frameworks
Review client environments and technical artifacts to identify risks, gaps and architectural anti-patterns, and recommend appropriate mitigations
Coach client platform and engineering teams on Azure infrastructure, security, governance and operational best practices
Support pre-sales activities, including proposals, SOWs, technical estimates and solution documentation
Serve as a trusted infrastructure technical lead across client, Data, AI and delivery teams
QUALIFICATIONS, SKILLS & EXPERIENCE
5+ years of hands-on experience in cloud or enterprise infrastructure engineering or architecture, with deep Microsoft Azure expertise
Strong hands-on experience with Azure networking, including hub-and-spoke architectures, ExpressRoute, VPN, private endpoints, private DNS, NSGs, UDRs and firewalls
Production experience building infrastructure as code using Terraform and/or Bicep
Hands-on experience implementing CI/CD for infrastructure using GitHub Actions and/or Azure DevOps
Strong understanding of Azure governance, Azure Policy, RBAC and cost management
Experience with Microsoft Entra ID, managed identities, Azure Key Vault and Microsoft Defender for Cloud
Experience provisioning and supporting infrastructure for data platforms such as Microsoft Fabric, Azure Data services and/or Databricks
Experience implementing monitoring and operational capabilities using Azure Monitor, Log Analytics and diagnostic settings
Strong understanding of cloud security, private networking and least-privilege access principles
Consulting or client-facing delivery experience with the ability to move seamlessly between architecture, advisory and hands-on implementation
Proven ability to lead technical discussions and troubleshoot complex infrastructure and connectivity challenges
Strong written and verbal communication skills with the ability to create clear architecture, operational and technical documentation
NICE TO HAVE
Microsoft certifications such as AZ-104, AZ-305, AZ-700, AZ-400 and/or DP-600
HashiCorp Terraform Associate certification
Databricks certification
Hands-on Microsoft Fabric administration experience, including capacity management, gateways, private networking and security features
Experience with Microsoft 365 and Entra tenant-to-tenant migrations
Experience with Azure VMware Solution assessments or implementations
Experience supporting Azure OpenAI and/or Azure AI Foundry infrastructure
Exposure to Agent365
Exposure to AWS environments
Experience supporting client penetration testing findings and remediation
ABOUT ADASTRA
Adastra is a global leader in AI and data-driven transformation, helping organizations lead with artificial intelligence—responsibly, strategically, and at scale. With over 25 years of experience, Adastra empowers enterprise clients to unlock business value through data innovation, operational excellence, and smart customer engagement.
Trusted by some of the world’s most prominent brands, Adastra delivers end-to-end solutions grounded in thoughtful strategy, robust governance, and deep technical expertise. From defining vision to ensuring execution, Adastra guides organizations through every stage of their AI, data and cloud journey—building future-ready capabilities and delivering measurable, lasting impact.
Adastra serves clients across key industries including financial services, automotive, manufacturing, technology, media and telecom (TMT), healthcare, retail, and professional services. The company employs more than 2,000 professionals across North America, Europe, and Asia.
WHAT WE OFFER
Opportunity for advancement and career progression
Competitive compensation package
Comprehensive benefits plan
Successful referral program
The opportunity to work with one of Canada’s 50 Best Managed Companies
Satisfaction of working for a reputable company
A flexible, dynamic, and diverse workplace
EQUAL OPPORTUNITY EMPLOYER
In our commitment to promote fair and equitable treatment of all employees and applicants, Adastra Corporation provides equal employment opportunities for all individuals regardless of age, sex, disability, race, ethnic origin, citizenship, creed, sexual orientation, marital status, or any other ground as described in the Ontario Human Rights Code. In addition, accommodation will be provided during the hiring process. Adastra Corporation’s implementation and support of employment initiatives, encourage diversified labour force participation and equal access to opportunities based on merit and performance.
AI Usage - Our hiring process includes the use of AI-enabled tools to screen applications (e.g., keyword matching, qualification ranking). A human recruiter reviews all AI-generated shortlists to make informed hiring decisions.
There has been an increased instance of fraudulent job offers coming from people posing as Adastra HR employees. Please note that Adastra will never request fees as part of our recruiting process and any emails sent to you that are not from ‘@adastragrp.com’ or ‘@talent.icims.com’ are fraudulent. All employment offers are sent via DocuSign and if you receive an employment offer from a suspicious email and not via DocuSign, it is fraudulent.
Contact careers@adastragrp.com to inquire about jobs at Adastra, to report a suspicious request for money or personal information from external websites or suspicious employment offers.