{"id":4215231,"url":"https://alion.io/job/iko-industries-cloud-architect","title":"Cloud Architect","company":{"id":9365,"name":"IKO Industries","domain":"iko.com","url":"https://alion.io/company/iko-industries","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":74,"open_postings":197,"ghost_share":0.442,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-11-12T10:38:37Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mississauga, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"ServiceNow","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Ansible","optional":true},{"name":"FinOps","optional":true},{"name":"Oracle ERP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-12T00:00:00Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T02:32:02Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"IKO Industries Ltd. is a market leader in the manufacturing of roofing and building materials. IKO is a Canadian owned and operated business with production facilities worldwide and has many years of unparalleled success in the roofing materials industry. Quality, integrity, and trustworthiness are the values that underlie this success, and we have built this company by hiring people who hold these values. People like you!\nJob Description\nRole: Cloud Architect\nJob Summary:\nReporting to the Senior Manager, Infrastructure Security & Transformation, the Cloud Architect will be responsible for leading HSS Enterprises Ltd.'s cloud architecture, governance, security, and day-to-day Azure administration. The successful candidate will design, implement, maintain, and optimize enterprise cloud infrastructure across Microsoft Azure and AWS environments, ensuring scalability, security, resilience, and cost efficiency.\nThis role will play a critical part in developing a new Azure landing zone and advancing the organization's cloud-by-default infrastructure strategy. The Cloud Architect will collaborate with Core Infrastructure, Network, Information Security, ERP, Dynamics 365, and external cloud partners to support enterprise technology initiatives.\nThe successful candidate must be based in Mississauga, Ontario, and work on-site.\nBenefits\nHealth Insurance (includes Virtual Health, and HCSA)\nDental Insurance\nVision Insurance\nLife Insurance\nLong-term Disability\nShort-term Disability\nRRSP Match\nPaid Vacation\nFloating Days\nEmployee Assistance Program\nEmployee Engagement Events\nAwards and Recognition\nTuition Reimbursement\nService Awards\nEmployee Perks & Discounts\nJob Responsibilities\nLead the design, development, and maintenance of enterprise Azure and AWS cloud architectures, standards, reference designs, and platform roadmaps.\nDesign cloud hosting solutions for new and migrating workloads, ensuring compliance with established architecture and security standards.\nLead cloud infrastructure improvements, including the development and implementation of a new Azure landing zone.\nDevelop and maintain backup, disaster recovery, and business continuity strategies for critical cloud workloads.\nManage day-to-day Azure administration, including provisioning, configuring, patching, monitoring, and decommissioning virtual machines and cloud resources.\nRespond to cloud-related incidents and service requests through ServiceNow, including access management, provisioning, configuration changes, and troubleshooting.\nParticipate in incident response activities and coordinate technical support with Microsoft and other cloud service providers.\nMonitor cloud infrastructure health, resource utilization, capacity, alerts, backups, and Key Vault certificate and secret expiration.\nConfigure and maintain cloud networking components, including Network Security Groups (NSGs), firewall rules, private endpoints, DNS records, and VPN connectivity.\nProvision and support cloud environments for enterprise business applications, including ERP, Microsoft Dynamics 365, and Power Platform.\nManage infrastructure changes through established Change Advisory Board (CAB) processes and maintain accurate technical documentation and operational runbooks.\nImplement and maintain cloud identity and access management controls, including Azure RBAC, Microsoft Entra ID, Privileged Identity Management (PIM), conditional access, application registrations, and managed identities.\nCollaborate with Information Security to maintain compliance with organizational security policies, Microsoft Defender for Cloud recommendations, and vulnerability remediation requirements.\nEstablish and enforce Azure and AWS governance standards, including management groups, Azure Policy, subscription management, resource tagging, and role-based access controls.\nManage AWS identity federation through Microsoft Entra ID and AWS IAM Identity Center.\nMonitor cloud spending, conduct monthly cost reviews, optimize resource utilization, and implement cost-saving initiatives through right-sizing and resource management.\nDevelop and maintain infrastructure-as-code solutions using Terraform and automated deployment pipelines through GitHub Actions or Azure DevOps.\nImplement secure automation practices, including workload identity federation (OIDC) and eliminating stored credentials where possible.\nSupport the development of cloud administration and automation capabilities among North American and European system administrators through knowledge sharing, documentation, pairing, and code reviews.\nPerform additional duties as assigned.\nQualifications\nPost-secondary education in Information Technology, Computer Science, Engineering, or a related discipline, or equivalent professional experience.\nMinimum 5 years of experience in enterprise IT infrastructure, including at least 3 years of hands-on production Azure administration and 2 years of cloud architecture or technical leadership experience.\nDemonstrated experience designing, implementing, and maintaining enterprise-scale Azure cloud environments.\nStrong understanding of Microsoft Azure Cloud Adoption Framework or similar cloud governance methodologies.\nProven experience with Azure management groups, Azure Policy, RBAC, and enterprise networking architectures, including hub-and-spoke and Azure Virtual WAN.\nHands-on experience developing Terraform infrastructure-as-code modules and implementing CI/CD pipelines using GitHub Actions or Azure DevOps.\nStrong knowledge of Microsoft Entra ID, including conditional access, Privileged Identity Management, managed identities, workload identities, and application registrations.\nAdvanced understanding of Azure networking technologies, including private endpoints, private DNS, Azure Firewall, network virtual appliances, VPN, and ExpressRoute.\nExperience planning and executing cloud workload migrations across Azure subscriptions or tenants, including managing resource migration limitations.\nDemonstrated ability to design and maintain cloud backup, disaster recovery, and infrastructure resilience solutions.\nStrong troubleshooting, analytical, and problem-solving skills in complex enterprise cloud environments.\nExcellent written and verbal communication skills, with the ability to prepare technical architecture documentation, operational runbooks, change requests, and executive-level status updates.\nAbility to collaborate effectively with cross-functional technical teams, business stakeholders, and external vendors.\nStrong organizational skills with the ability to manage competing priorities and deliver cloud infrastructure initiatives.\nPreferred Qualifications\nMicrosoft certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104), or DevOps Engineer Expert (AZ-400).\nExperience with AWS cloud infrastructure, particularly AWS Organizations and IAM Identity Center integration with external identity providers.\nFamiliarity with Azure billing and subscription management under a Microsoft Customer Agreement (MCA).\nExperience implementing FinOps practices, including cloud budgeting, cost allocation, showback reporting, and reserved-capacity planning.\nExperience supporting cloud-hosted enterprise applications, including JD Edwards, Microsoft Dynamics 365 Finance & Operations, or other ERP platforms.\nExperience developing automation solutions using Ansible, PowerShell, Python, or Azure DevOps.\nPrevious experience supporting global, multi-site manufacturing environments.\nBenefits of Employment: IKO recognizes that its success is due to the strength of its employees. A primary goal of IKO is to promote individual employee's sense of accomplishment and contribution so that employees enjoy their association with IKO. The Company invests in its employees so that they are the most knowledgeable in the industry, and undertakes great efforts to nurture loyalty to, and teamwork at, IKO. We are pleased to offer competitive compensation, health care, a progressive and challenging workplace and a commitment to teamwork and integrity.\nDiversity and Equal Opportunity Employment: IKO Industries Ltd. is an equal opportunity employer. We are committed to diversity and inclusion and are pleased to consider all qualified applicants for employment without consideration to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status or disability. IKO Industries Ltd. encourages and welcomes applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.","description_format":"text","description_chars":8649,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Health insurance","Life insurance","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Building Materials"],"lifecycle":[{"event":"open","at":"2026-11-13T02:32:02Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":43,"reasons":["conf:4","win:early","comp:brand"],"computed_at":"2026-11-13T07:16:10Z"},"pay":null,"html_url":"https://alion.io/job/iko-industries-cloud-architect","json_url":"https://alion.io/job/iko-industries-cloud-architect.json","meta":{"generated_at":"2026-11-13T07:16:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15119,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9365},"rest":"https://alion.io/mcp/rest/get_company?id=9365"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fiko-industries-cloud-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fiko-industries-cloud-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fiko-industries-cloud-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/iko-industries-cloud-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fiko-industries-cloud-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4215231}},{"tool":"search_jobs","arguments":{"company":"iko.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4215231},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}