Lead Technical Architect Azure Landing Zone, AKS & AVS Migrati

Post Date

Jun 24, 2025

Location

Markham,
Ontario

ZIP/Postal Code

L3R9Z7
Canada
Aug 27, 2025 Insight Global

Job Type

Contract

Category

Architect

Req #

TOR-790963

Pay Rate

$68 - $85 (hourly estimate)

Who Can Apply

  • Candidates must be legally authorized to work in Canada

Job Description

We are hiring a Lead Technical Architect to drive architectural leadership across two major transformation workstreams: Kubernetes-based container workload migration to Azure Kubernetes Service (AKS) and VMware-based workload migration to Azure VMware Solution (AVS). This is a critical, cross-functional role responsible for defining, validating, and overseeing the end-to-end architecture, governance enforcement, and technical delivery across Azure Landing Zone, containerization, virtualization, DevSecOps, and service integrations.

The ideal candidate will have deep technical expertise in Azure platform services, hybrid networking, Kubernetes, VMware infrastructure, automation tooling, and enterprise governance models. This individual must be capable of translating high-level cloud strategy into technically executable designs that support security, scale, and operational integrity. This is a pivotal leadership role in a dual-stream cloud transformation effort involving cutting-edge Azure services, containerization with AKS, and virtualization via AVS. You will architect the foundation for future-state cloud operations, influence platform governance, and lead the enterprises technical transformation.

We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to Human Resources Request Form. The EEOC "Know Your Rights" Poster is available here.

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience

Cloud & Platform Architecture

· Expert-level knowledge of Microsoft Azure, especially:

o Azure Landing Zones (Enterprise-scale design)

o Azure Resource Hierarchy (Management Groups, Subscriptions)

o Azure RBAC, Key Vault, Log Analytics, Azure Monitor, Azure Policy

· Strong knowledge of AKS internals:

o Kubernetes Networking: CNI plugins (Azure CNI, Calico), Ingress controllers (AGIC, NGINX), Istio/Service Mesh

o Storage integration (Azure Disks/Files, CSI drivers)

o Identity management (Azure AD, Pod/workload identity)

o Multi-tenant, multi-cluster governance strategies

· Strong understanding of Azure VMware Solution (AVS):

o AVS Private Cloud setup, HCX configuration

o NSX-T networking, ExpressRoute, vSAN storage, AVS Firewall

o Lift-and-shift architecture and hybrid integrations

Automation & DevSecOps

· Hands-on with Infrastructure as Code (IaC):

o Terraform, Bicep, ARM templates

o Ansible automation for configuration and middleware provisioning

· CI/CD orchestration using Azure DevOps and/or GitHub Actions

· Governance and compliance via Azure Policy, Sentinel, Defender for Cloud

Security & Networking

· Deep knowledge of hybrid and cloud network architecture:

o ExpressRoute, VPN Gateway, Private Endpoints, Azure Firewall, Palo Alto integration

o DNS, Application Gateway, Front Door, NSGs, UDRs

· Familiarity with Zero Trust models, IAM policies, and workload isolation

General Architecture & Leadership

· Expertise in translating business strategy into technical design and implementation blueprints

· Experience in running Architecture Review Boards, leading workshops, and mentoring multi-disciplinary teams

· Proven leadership in multi-workstream delivery across AKS, AVS, and enterprise services

Nice to Have Skills & Experience

· Azure certifications: AZ-305 (Solutions Architect Expert), AZ-700 (Network Engineer Associate), AZ-400 (DevOps Engineer Expert)

· Kubernetes certifications: CKA, CKAD

· Working experience in leading large scale migration projects for Containers and VMs

· Azure IaC (Infrastructure as code) Handson experience

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.