Cloud Architect

IKO Industries Ltd. is a market leader in the manufacturing of roofing and building materials. IKO is a Canadian owned and operated business with production facilities worldwide and has many years of unparalleled success in the roofing materials industry. Quality, integrity, and trustworthiness are the values that underlie this success, and we have built this company by hiring people who hold these values. People like you!

Job Description

Role: Cloud Architect

Job Summary:

Reporting to the Senior Manager, Infrastructure Security & Transformation, the Cloud Architect will be responsible for leading HSS Enterprises Ltd.'s cloud architecture, governance, security, and day-to-day Azure administration. The successful candidate will design, implement, maintain, and optimize enterprise cloud infrastructure across Microsoft Azure and AWS environments, ensuring scalability, security, resilience, and cost efficiency.

This role will play a critical part in developing a new Azure landing zone and advancing the organization's cloud-by-default infrastructure strategy. The Cloud Architect will collaborate with Core Infrastructure, Network, Information Security, ERP, Dynamics 365, and external cloud partners to support enterprise technology initiatives.

The successful candidate must be based in Mississauga, Ontario, and work on-site.

Benefits

• Health Insurance (includes Virtual Health, and HCSA)
• Dental Insurance
• Vision Insurance
• Life Insurance
• Long-term Disability
• Short-term Disability
• RRSP Match
• Paid Vacation
• Floating Days
• Employee Assistance Program
• Employee Engagement Events
• Awards and Recognition
• Tuition Reimbursement
• Service Awards
• Employee Perks & Discounts

Job Responsibilities

• Lead the design, development, and maintenance of enterprise Azure and AWS cloud architectures, standards, reference designs, and platform roadmaps.
• Design cloud hosting solutions for new and migrating workloads, ensuring compliance with established architecture and security standards.
• Lead cloud infrastructure improvements, including the development and implementation of a new Azure landing zone.
• Develop and maintain backup, disaster recovery, and business continuity strategies for critical cloud workloads.
• Manage day-to-day Azure administration, including provisioning, configuring, patching, monitoring, and decommissioning virtual machines and cloud resources.
• Respond to cloud-related incidents and service requests through ServiceNow, including access management, provisioning, configuration changes, and troubleshooting.
• Participate in incident response activities and coordinate technical support with Microsoft and other cloud service providers.
• Monitor cloud infrastructure health, resource utilization, capacity, alerts, backups, and Key Vault certificate and secret expiration.
• Configure and maintain cloud networking components, including Network Security Groups (NSGs), firewall rules, private endpoints, DNS records, and VPN connectivity.
• Provision and support cloud environments for enterprise business applications, including ERP, Microsoft Dynamics 365, and Power Platform.
• Manage infrastructure changes through established Change Advisory Board (CAB) processes and maintain accurate technical documentation and operational runbooks.
• Implement and maintain cloud identity and access management controls, including Azure RBAC, Microsoft Entra ID, Privileged Identity Management (PIM), conditional access, application registrations, and managed identities.
• Collaborate with Information Security to maintain compliance with organizational security policies, Microsoft Defender for Cloud recommendations, and vulnerability remediation requirements.
• Establish and enforce Azure and AWS governance standards, including management groups, Azure Policy, subscription management, resource tagging, and role-based access controls.
• Manage AWS identity federation through Microsoft Entra ID and AWS IAM Identity Center.
• Monitor cloud spending, conduct monthly cost reviews, optimize resource utilization, and implement cost-saving initiatives through right-sizing and resource management.
• Develop and maintain infrastructure-as-code solutions using Terraform and automated deployment pipelines through GitHub Actions or Azure DevOps.
• Implement secure automation practices, including workload identity federation (OIDC) and eliminating stored credentials where possible.
• Support the development of cloud administration and automation capabilities among North American and European system administrators through knowledge sharing, documentation, pairing, and code reviews.
• Perform additional duties as assigned.

Qualifications

• Post-secondary education in Information Technology, Computer Science, Engineering, or a related discipline, or equivalent professional experience.
• Minimum 5 years of experience in enterprise IT infrastructure, including at least 3 years of hands-on production Azure administration and 2 years of cloud architecture or technical leadership experience.
• Demonstrated experience designing, implementing, and maintaining enterprise-scale Azure cloud environments.
• Strong understanding of Microsoft Azure Cloud Adoption Framework or similar cloud governance methodologies.
• Proven experience with Azure management groups, Azure Policy, RBAC, and enterprise networking architectures, including hub-and-spoke and Azure Virtual WAN.
• Hands-on experience developing Terraform infrastructure-as-code modules and implementing CI/CD pipelines using GitHub Actions or Azure DevOps.
• Strong knowledge of Microsoft Entra ID, including conditional access, Privileged Identity Management, managed identities, workload identities, and application registrations.
• Advanced understanding of Azure networking technologies, including private endpoints, private DNS, Azure Firewall, network virtual appliances, VPN, and ExpressRoute.
• Experience planning and executing cloud workload migrations across Azure subscriptions or tenants, including managing resource migration limitations.
• Demonstrated ability to design and maintain cloud backup, disaster recovery, and infrastructure resilience solutions.
• Strong troubleshooting, analytical, and problem-solving skills in complex enterprise cloud environments.
• Excellent written and verbal communication skills, with the ability to prepare technical architecture documentation, operational runbooks, change requests, and executive-level status updates.
• Ability to collaborate effectively with cross-functional technical teams, business stakeholders, and external vendors.
• Strong organizational skills with the ability to manage competing priorities and deliver cloud infrastructure initiatives.

Preferred Qualifications

• Microsoft certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104), or DevOps Engineer Expert (AZ-400).
• Experience with AWS cloud infrastructure, particularly AWS Organizations and IAM Identity Center integration with external identity providers.
• Familiarity with Azure billing and subscription management under a Microsoft Customer Agreement (MCA).
• Experience implementing FinOps practices, including cloud budgeting, cost allocation, showback reporting, and reserved-capacity planning.
• Experience supporting cloud-hosted enterprise applications, including JD Edwards, Microsoft Dynamics 365 Finance & Operations, or other ERP platforms.
• Experience developing automation solutions using Ansible, PowerShell, Python, or Azure DevOps.
• Previous experience supporting global, multi-site manufacturing environments.

Benefits of Employment: IKO recognizes that its success is due to the strength of its employees. A primary goal of IKO is to promote individual employee's sense of accomplishment and contribution so that employees enjoy their association with IKO. The Company invests in its employees so that they are the most knowledgeable in the industry, and undertakes great efforts to nurture loyalty to, and teamwork at, IKO. We are pleased to offer competitive compensation, health care, a progressive and challenging workplace and a commitment to teamwork and integrity.

Diversity and Equal Opportunity Employment: IKO Industries Ltd. is an equal opportunity employer. We are committed to diversity and inclusion and are pleased to consider all qualified applicants for employment without consideration to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status or disability. IKO Industries Ltd. encourages and welcomes applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.