Cloud Architect

Zafin is an AI platform company helping regulated institutions modernize how critical work is designed, governed, and delivered. Our technology enables organizations to move faster while maintaining the governance, accountability, and control required in highly regulated environments.

Our portfolio includes Zafin AIOS, an agent orchestration platform for governed AI work; the Zafin Banking Platform, which helps banks modernize product, pricing, offers, billing, loyalty, and relationship management; and Zafin IO, an integration platform that connects data, systems, and workflows across complex enterprise environments.

Headquartered in Toronto, Canada, Zafin partners with leading financial institutions across North America, Europe, the Middle East, Africa, and Asia-Pacific. As AI transforms the future of financial services, we're building the platforms that help regulated organizations adopt AI responsibly and at scale.

What is the opportunity?

As a Principal Azure Platform & Cloud Operations Architect, you will play a hands-on role in strengthening how Zafin runs critical production systems on Azure. You will assess current cloud operations processes and platform architecture, identify opportunities for automation and improvement, and implement operational patterns that improve reliability, scalability, and delivery confidence.

In this role, you will also serve as the escalation subject matter expert for complex technical roadblocks, particularly across AKS, Azure networking, and deployment workflows, helping the team resolve issues while building more mature and repeatable operating practices.

What will you do?

Cloud Operations and Platform Reliability

• Assess current operational workflows, including provisioning, deployments, incident response, and change management, and implement automation, process improvements, and operational guardrails that reduce manual effort and improve reliability.
• Lead the architecture and operational maturity of Azure Kubernetes Service (AKS) environments, including cluster topology, node pools, upgrades, scaling, resiliency patterns, ingress and egress, workload identity, secrets management, and runtime security.

Azure Networking and Infrastructure Automation

• Provide deep expertise in Azure networking and secure connectivity patterns, including VNET design, routing and UDRs, NSGs, DNS, private endpoints, firewalls, load balancers, gateways, and secure ingress and egress.
• Troubleshoot complex network and performance issues that affect production systems across AKS, Azure networking, and application layers.
• Design and implement infrastructure as code using Terraform, with reusable modules, clear lifecycle management, environment consistency, and safe change practices.

Deployment, Observability, and Incident Readiness

• Strengthen deployment maturity using Argo CD and Helm, improving repeatability, release confidence, environment promotion, and rollback strategies.
• Enhance CI/CD pipelines using Azure DevOps, Jenkins, or GitHub Actions by introducing quality gates, validation, security scanning, and automated delivery patterns for production.
• Improve monitoring, logging, alerting, and dashboards using Azure Monitor, Log Analytics, and Application Insights to create actionable signals, reduce noise, and strengthen incident response.
• Promote production readiness through runbooks, readiness reviews, operational checklists, and continuous improvement of corrective and preventive actions.

Technical Leadership and Cross-Functional Collaboration

• Act as the L3/L4 technical escalation point for high-severity incidents, guiding triage and recovery, leading root cause analysis, and ensuring improvements are implemented through automation and platform enhancements.
• Mentor and unblock Cloud Operations engineers during complex technical challenges, raising team capability and establishing consistent engineering standards.
• Partner with Engineering, SRE, Security, and Delivery teams to align operational patterns, platform guardrails, and production readiness expectations across services and environments.

What do you need to succeed?

Must Haves

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, combined with 8+ years of hands-on experience in cloud platform engineering, DevOps/SRE, or cloud operations.
• Demonstrated ownership of production-grade systems, with the ability to operate effectively in complex, high-availability environments.

Azure, Kubernetes, and Networking Expertise

• Strong hands-on experience with Azure, particularly Azure Kubernetes Service (AKS), and deep experience running Kubernetes in production, including upgrades, scaling, failure modes, and troubleshooting.
• Deep expertise in Azure networking and secure connectivity patterns, with the ability to diagnose complex multi-layer issues across AKS, networking, and application boundaries.

Automation, IaC, and Deployment Practices

• Proven hands-on experience implementing infrastructure as code with Terraform, including modules, state strategy, environment consistency, and safe rollout practices.
• Strong experience with GitOps and deployment tooling, including Argo CD and Helm, along with a solid understanding of release strategies and operational controls.
• Proficiency managing CI/CD pipelines and automation using Azure Pipelines, Jenkins, or GitHub Actions, with a focus on improving deployment reliability through automated checks and gates.

Observability, Scripting, and Incident Leadership

• Hands-on experience with Azure observability tools, including Azure Monitor, Log Analytics, and Application Insights, to improve service health visibility and incident response effectiveness.
• Proficiency in scripting and automation using Python, Bash, or PowerShell to build operational tooling and reduce repetitive manual work.
• Strong problem-solving and communication skills, with the ability to remain calm under pressure and guide teams through critical production incidents.

Nice to have:

• Microsoft certifications (e.g., Azure Solutions Architect Expert) and/or Kubernetes certifications (CKA/CKS).
• Experience building “golden path” templates/self-service workflows; exposure to SRE practices; exposure to Azure cost optimization/FinOps.

Additional Job Details

Vacancy Status: Open Position to be Filled

Expected Salary Range: CAD 150,000 -180,000

Mode of Work: Hybrid

Use of AI: Zafin may use Artificial Intelligence (AI) and/or other forms of automated technology to screen and/or assess applicants for this position. Zafin will not utilize AI for conducting interviews and/or making hiring decisions.

What’s in It for You?

At Zafin, you’ll join a culture that values diversity, teamwork, and high-quality work, with opportunities for professional growth and career advancement. We invest in our people through a comprehensive rewards program that supports your health, financial well-being, and work-life balance, including:

• Competitive salaries and annual bonus opportunities
• Fully company-paid health benefits
• Generous vacation, holidays, and paid volunteering days
• RRSP matching
• Employer-paid insurance coverage
• Wellness resources and extensive paramedical benefits

Explore career opportunities and learn more about life at Zafin at zafin.com/careers.

 Accessibility

Zafin welcomes and encourages applications from people with disabilities. Accommodation is available upon request for candidates participating in any stage of the selection process.

 Applicant Privacy

Zafin is committed to protecting the privacy and security of applicants’ personal information throughout the recruitment process. For details on how we collect, use, store, handle, retain, and disclose your information, please review Zafin’s Privacy Notice.

By submitting a job application, you confirm your agreement to the processing of your personal data as described in the candidate privacy notice.

What’s in it for you

Joining our team means being part of a culture that values diversity, teamwork, and high-quality work. We offer competitive salaries, annual bonus potential, generous paid time off, paid volunteering days, wellness benefits, and robust opportunities for professional growth and career advancement. Want to learn more about what you can look forward to during your career with us? Visit our careers site and our openings: zafin.com/careers

Zafin welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. 

Zafin is committed to protecting the privacy and security of the personal information collected from all applicants throughout the recruitment process. The methods by which Zafin contains uses, stores, handles, retains, or discloses applicant information can be accessed by reviewing Zafin’s privacy policy at https://zafin.com/privacy-notice/. By submitting a job application, you confirm that you agree to the processing of your personal data by Zafin described in the candidate privacy notice.