Senior Azure Specialist (Cloud Infra)

About F12: F12 was built by uniting IT consulting firms across Canada with a shared vision: to reduce risk and complexity by crafting technology platforms that empower leaders to focus and thrive. We elevate IT conversations from ingredients to outcomes, delivering fully designed solutions with no bad options. If you’re looking for the fast lane into an IT career or want to supercharge your professional development, you’ve come to the right place. At F12, you’ll collaborate with a diverse team and gain exposure to technology services across countless businesses—building a resume rich with experience and accomplishments. Our mission is to elevate our employees by building and retaining an elite team of IT professionals equipped to deliver unmatched service to Canadian business leaders. We value humble service, continuous improvement, and hard work—and we’re looking for like-minded individuals to join us.    The Position: We are seeking a highly skilled Senior Cloud, AI, and Security Architect to lead the design, implementation, and governance of secure, scalable, multi‑cloud environments across Azure and AWS. This role blends deep cloud engineering expertise with advanced security and enterprise networking capabilities. You will partner with the Sr Cloud Solution Architect, Cybersecurity, Data, and AI teams to deliver secure-by-design architecture, modern automation, and resilient platforms that support enterprise-scale applications.   This position is ideal for a senior technologist who thrives in complex environments, influences cross‑functional teams, and elevates engineering standards across cloud, AI, data, and network domains.     Multi‑Cloud Architecture & Engineering   * Design, build, and maintain Azure and AWS infrastructure using compute, networking, storage, serverless, and PaaS services.   * Architect multi‑cloud solutions that meet enterprise requirements for scalability, security, governance, and cost efficiency.   * Maintain reusable cloud patterns, landing zones, and reference architectures.   * Support containerized workloads across AKS, EKS, ECS, Fargate, App Services, and Lambda.   * Data Warehouse Migration to Azure and AWS   * Infra and Database Migration to Azure and AWS   * Microsoft Azure VMware Solution   * Optimize workloads for performance, resilience, and cost (FinOps mindset).   * Ensure operational readiness, backups, and disaster recovery across both clouds.   Infrastructure as Code (IaC) & Automation   * Troubleshoot and maintain IaC using CDK, CDKTF, Terraform, and Bicep.   * Develop reusable IaC modules, wrappers, and libraries for consistency and compliance.   * Enhance automation pipelines for provisioning, configuration management, and policy enforcement.   CI/CD & Modern Application Delivery   * Maintain CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS Code Pipeline.   * Integrate security scanning, compliance checks, and artifact management into release workflows.   * Enable cloud-native development patterns and modern application hosting.   Cloud Security   * Assess, design, implement, and automate security controls across Azure and AWS.   * Develop and maintain cloud security patterns, baselines, and policies-as-code.   * Review and approve changes with security implications (IAM roles, policies, SGs, etc.).   * Serve as the cloud security SME for IaaS, PaaS, and SaaS implementations.   * Ensure alignment with regulatory frameworks (CSA CCM, ISO 27001/27017, NIST CSF).   Data Security   * Implement and manage DSPM tools to monitor sensitive data exposure.   * Establish controls for structured/unstructured data across Snowflake, S3, ADLS, data lakes, and warehouses.   * Drive adoption of data-centric security practices.   * Implement DLP, data classification, encryption, tokenization, and key management.   Network Infrastructure & Cloud Networking   * Configure, and troubleshoot routers, switches, firewalls, wireless access points, and cloud networks.   * Design and support Azure networking (VNet, NSG, routing, hybrid connectivity).   * Lead upgrades, migrations, and integration projects.   * Monitor network performance, availability, and reliability.   * Implement network security measures in coordination with Cybersecurity teams.   Operations, Monitoring & Optimization   * Implement end-to-end monitoring, logging, and alerting using Azure Monitor, Log Analytics, CloudWatch, and equivalent tools.   * Ensure strong observability through metrics, logs, traces, dashboards, and runbooks.   * Manage patching, upgrades, and lifecycle governance for cloud and container workloads.   Security Compliance & Governance   * Lead cybersecurity risk assessments for cloud, AI/ML, and data platforms.   * Provide pragmatic security guidance to enable innovation while managing risk.   * Support investigations and remediation of security incidents, including AI model compromise or data breaches.   * Collaborate with Information Security, Product, and Engineering teams to assess and mitigate risk.   * Information Protection and Governance   * Identity and Access Management     Required Qualifications   * 7–10+ years of experience in cloud engineering, security architecture, or related domains.   * Hands-on experience with Azure and AWS in production environments.   * Hands-on experience with Fortinet and Paolo Alto Firewalls    * Strong proficiency with IaC (Terraform, CDK, Bicep).   * Expertise in containers and orchestration (AKS, EKS, ECS, Fargate).   * Strong scripting skills (PowerShell, Python, Bash).   * Deep knowledge of cloud networking, identity, and security principles.   * Experience with CI/CD pipelines and automation frameworks.   * Strong understanding of TCP/IP, DNS, DHCP, VPN, VLANs, routing protocols.   * Experience with enterprise network infrastructure (routers, switches, firewalls, wireless).   * Familiarity with Ruckus One, Strata Cloud Manager, Palo Alto, and ServiceNow.     Preferred Qualifications   * Azure certifications: AZ‑104, AZ‑305, AZ‑400.   * AWS certifications: Solutions Architect Associate/Professional, DevOps Engineer, Security Specialty.   * Security certifications: CISSP, CCSP, CCSK.   * Experience in regulated industries (finance, banking, insurance).   * Knowledge of DSPM tools, DLP, and data governance frameworks.   * Familiarity with Snowflake, Databricks, Redshift, Synapse.     Core Competencies   * Strong analytical and problem-solving skills.   * Ability to work autonomously and drive cloud services end-to-end.   * Excellent communication and cross-team collaboration skills.   * Customer-focused mindset with a passion for enabling high-performing engineering teams.   * Ability to mentor junior team members and elevate engineering standards.   * Demonstrated ability to influence senior leadership and drive security-first decision-making.   * Passion for DevSecOps, MLSecOps, and staying ahead of emerging AI threats.     What You Can Expect from Us: We are proud of our forward-thinking, dynamic culture that champions diversity, inclusivity, and a respectful working environment. We also want to make sure that however you get IT done in all parts of your life, we’ve got your back. Our comprehensive total rewards program includes:     * Work-Life & Growth: Three weeks vacation plus extra Flex Days, leadership development opportunities, growth coaching, and reimbursements for educational advancement and certifications.   * Health & Financial Well-Being: Health Spending Account or RRSP matching, extended health care, dental and vision coverage, disability and life insurance, and an employee assistance program.   * Additional Perks: Tuition reimbursement, paid time off, on-site parking, high-class office amenities, and company events.    Our Equal Opportunity Commitment:  * F12.net practices as an equal opportunity employer in all services locations. We are committed to building and maintaining a workforce diverse in experience, skills and knowledge. The company maintains a strict policy to ensure equal employment opportunities and do not discriminate based on any grounds and elements protected by law. For those requiring assistance with disabilities, information relating to accommodation and accommodation measures will be addressed confidentially. Please notify us in advance if any accommodation needs are required.    The above statements are intended to describe the general nature and level of work performed by people assigned to this job classification. They are not intended to be an exhaustive list of all responsibilities and duties required of people assigned to this job classification.