AtkinsRéalis is seeking a Azure Architect & Administrator with strong DevSecOps experience to design, secure, automate, and operate our Azure cloud platform for the Candu Energy Nuclear division of our company.
This role blends cloud architecture, hands on administration, and security first automation, supporting both infrastructure and application delivery teams.
You will be responsible for defining secure Azure platform standards, implementing security by design architectures, and enabling Infrastructure as Code with integrated security and compliance controls across development, test, and production environments.
This is a key technical role supporting enterprise scale, mission critical workloads in a highly regulated environment.
Azure Architecture & Platform Design:
-
Design, implement, and evolve secure, scalable, and resilient Azure architectures aligned with business, security, and compliance requirements.
-
Define and maintain Azure landing zones, reference architectures, and platform standards.
-
Lead architecture decisions across Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and hybrid cloud environments.
-
Support cloud migration and modernization initiatives (on premises to Azure, hybrid models).
Azure Administration & Operations:
-
Administer and support core Azure services, including:
-
Virtual Machines, Virtual Networks, Network Security Groups (NSGs), Load Balancers, VPN/ExpressRoute.
-
Azure Storage, Backup, and Site Recovery.
-
Azure AD / Entra ID, Role Based Access Control (RBAC), Conditional Access.
-
Monitor platform health, availability, performance, and capacity using Azure-native tooling.
-
Troubleshoot and resolve complex cloud infrastructure and security-related issues.
-
Participate in operational support, escalation, and on call rotations as required.
DevSecOps & Secure Automation:
-
Implement Infrastructure as Code (IaC) using Bicep/ARM, ensuring deployments are secure, repeatable, and auditable.
-
Embed security and compliance into pipelines (DevSecOps), including:
-
Policy as code and guardrails.
-
Secrets management and identity-based access.
-
Automated security validation and compliance checks.
-
Promote automation first, least privilege, and zero trust principles across cloud operations.
-
Enable development teams with secure deployment patterns and standardized templates.
Security, Governance & Compliance:
-
Implement and maintain Azure security controls and platform protections.
-
Enforce governance using Azure Policy, management groups, RBAC, and tagging standards.
-
Partner with security, risk, and compliance teams on:
-
Risk assessments and threat modeling.
-
Audit readiness and control validation.
-
Security incident response and remediation.
-
Ensure cloud environments meet internal security standards and regulatory obligations.
Optimization, Reliability & Continuous Improvement:
-
Optimize Azure environments for cost, performance, reliability, and security posture.
-
Improve observability and detection using Azure Monitor, Log Analytics, and alerting.
-
Contribute to platform roadmaps, technical documentation, and operational runbooks.
-
Act as a trusted technical advisor and mentor to infrastructure and application teams.
-
Microsoft Azure certifications such as:
-
Azure Solutions Architect Expert.
-
Azure Administrator Associate.
-
5+ years of experience in IT infrastructure, cloud engineering, or platform operations.
-
3+ years of hands on experience with Microsoft Azure.
-
Strong experience with Infrastructure as Code (Bicep).
-
Experience in coding, scripting languages, DevOps, DevSecOps, automation and tooling.
-
Experience implementing policy as code, secure pipelines, and secrets management.
-
Experience operating hybrid cloud environments.
-
Experience working in regulated, high security, or critical infrastructure environments.
-
Strong experience with:
-
Azure networking, identity, and security architecture.
-
Azure AD/Entra ID and access management.
-
Windows Server and/or Linux in cloud environments.
-
Demonstrated experience with Azure Enterprise Scale/Landing zones.
-
Proficiency with PowerShell and/or Azure CLI.
-
Familiarity with ITIL, security frameworks, or enterprise service delivery models.
-
Exposure to container platforms and secure deployment automation.
Explore the rewards and benefits that help you thrive – at every stage of your life and your career at AtkinsRéalis in Canada.
Enjoy competitive compensation, employee recognition, and a brilliant range of flexible benefits you can tailor to your health, wellbeing, financial and lifestyle needs.
Make the most of diverse opportunities for training and professional development to grow your skills and expertise.
And take advantage of our hybrid working culture and generous time-off policies to balance a fulfilling career with your personal life.
Be rewarded.
We're AtkinsRéalis, a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world's'infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We're committed to leading our clients across our various end markets to engineer a better future for our planet and its people.
AtkinsRéalis cares about your privacy. AtkinsRéalis and other subsidiary or affiliated companies of AtkinsRéalis (referred to throughout as "AtkinsRéalis") are committed to protecting your privacy. Please consult our Privacy Notice on our Careers site to know more about how we collect, use, and transfer your Personal Data.
By submitting your personal information to AtkinsRéalis, you confirm that you have read and accept our Privacy Notice.
Appropriate accommodation will be provided upon request throughout the recruitment and hiring process as required by Company policy and the Accessibility for Ontarians with Disabilities Act (AODA).
Successful applicants will be notified about AtkinsRéalis' accommodation policies at the time the employment offer is extended, and the information will be shared with new personnel during the onboarding process.
