Cloud Systems Administrator

Job Description

<p>Title: Azure Cloud Administrator</p><p>Duration:<br>1 year with<br>Optional Extension of<br>1 year</p><p>Security Clearance: Secret<br>(required) – processed by the CLIENT if selected to hire (Consultant must reside in Canada for a minimum of 5 years to be eligible to apply for Bank of Canada Secret Security Clearance)</p><p>Work Location: Ottawa, ON - Hybrid (required 10 days on-site per month)</p><p>JOB DESCRIPTION<br>:</p><p>The Consultant will be responsible for providing the following Services to the Bank:</p><p>Under the direction of the Assistant Director, Cloud and Virtualization Services;</p><ul><li>Establish and maintain various PaaS, IaaS Azure resources, resource groups & subscriptions aligning with Azure Landing Zone framework</li><li>Deploy, configure, and maintain Azure services like storage accounts, recovery service vaults, ketvault, login apps, function apps, etc., including sku selection, private endpoints and optimizing for workload performance</li><li>Set up and maintain most of the PaaS Azure services, ensuring data redundancy, lifecycle policies, and secure access and network controls</li><li>Support workload migration from on-premises or other clouds to Azure, ensuring minimal downtime and smooth transition</li><li>Track and evaluate resource utilization, system performance, making pro-active recommendations for optimization</li><li>Configure and maintain Azure networking components such as VNets, subnets, NSGs, route tables and private DNS zones</li><li>Apply and enforce governance standards using Azure Policy, management groups, and compliance monitoring tools</li><li>Automate routine tasks with Azure Automation, PowerShell, CLI scripts, and Infrastructure as Code (IaC) templates</li><li>Collaborate with developers and DevOps teams to support CI/CD pipelines and streamline application deployments</li><li>Troubleshoot connectivity, configuration, and performance issues across Azure services, networks, and resources</li><li>Optimize cloud resources and spending by rightsizing services, reserving instances, and and implementing cost-optimization strategy</li><li>Monitor logs, metrics, and alerts through Azure Monitor, Log Analytics, Dynatrace and Application Insights for proactive issue detection</li><li>Implement and maintain role-based access control (RBAC) to enforce least-privilege access and prevent unauthorized activity</li><li>Configure and maintain Azure RedHat OpenShift (ARO) clusters, image registries, GitOps tools and container instances, ensuring availability and scaling</li><li>Work with internal stakeholders and subject matter experts to meet project goals and best practices</li><li>Other related activities and deliverables as required</li></ul><p>Required Qualifications & Skills:</p><p>The Consultant should have the following qualifications and skills:</p><ul><li>University degree in Computer Science, Information Technology, or related field</li><li>Minimum of five (5) years of experience in Microsoft Azure and or Cloud engineering roles</li><li>Minimum of five (5) years of experience with Azure core services (Compute, Storage, Networking, AAD, RBAC, Serverless, Containers)</li><li>Demonstrated experience working in Agile teams using JIRA and documenting in Confluence</li><li>Demonstrated experience with hybrid environments (on-premises + cloud integration)</li><li>Demonstrated understanding of virtualization technologies (VMware, Hyper-V) and migration practices</li><li>Demonstrated experience in setting up and maintaining CI/CD pipelines using Azure DevOps, ArgoCD GitOps</li><li>Demonstrated understanding with Git-based version control systems like GitHub</li><li>Demonstrated ability to work autonomously, self-prioritizing, switching between multiple tasks as required, to deliver high-priority items quickly</li></ul><p>Additional Qualifications:</p><p>The following will also be considered:</p><ul><li>Microsoft Azure certifications such as Azure Administrator Associate (AZ-104) or Azure Solutions Architect</li><li>Demonstrated knowledge of IaaS, PaaS, SaaS Azure services (Secret management, Databases, Backup management, API management, image repositories etc.)</li><li>Demonstrated experience with Azure security tools (Security Center, Defender for Cloud)</li><li>Demonstrated experience with scripting and automation (PowerShell, Azure CLI, ARM templates, Bicep, Terraform)</li><li>Demonstrated experience with Azure networking (VNets, VPNs, ExpressRoute, NSGs, load balancers)</li><li>Demonstrated knowledge of identity management (Azure AD, SSO, MFA, conditional access)</li><li>Demonstrated knowledge with containerization and orchestration (ARO, Kubernetes, AKS)</li><li>Demonstrated experience with monitoring and logging tools (Azure Monitor, Log Analytics, Application Insights)</li><li>Demonstrated experience in backup and disaster recovery solutions (Azure Backup, Site Recovery)</li><li>Demonstrated understanding of DevOps practices (CI/CD pipelines, GitHub Actions, Azure DevOps)</li></ul>