Cloud Engineer (Hybrid - Saskatchewan/Vancouver)

JD : Cloud Engineer (Hybrid - Saskatchewan/Vancouver) Azure platform, landing zones, and migration Location: Remote within Canada · Reports to: Principal Cloud Architect · Level: Senior About TechIO TechIO is a Canadian technology consultancy. We design, build, and modernize cloud infrastructure for organisations that cannot afford to get it wrong – health authorities, justice and public-safety agencies, and Crown corporations. Our work runs from landing-zone design and large-scale migration through to connectivity, delivery platforms, and the applications that sit on top. We are a small senior team. There is no bench of junior staff to delegate to and no layer of management between you and the decisions. You will own your work, present it to the customer, and be accountable for it. The role The Cloud Engineer builds and governs the Azure platforms our customers run on, and leads the discovery that determines what goes onto them. You will assess an estate, decide what is rehosted, replatformed, or retired, and then build the platform that holds it. You will be in the room when the customer asks why. Engagements are enterprise-scale: governed management-group hierarchies, policy baselines that survive audit, and estates running to four figures of virtual machines. What you will do Design and implement Azure landing zones to Cloud Adoption Framework and enterprise-scale patterns: management-group hierarchy, subscription topology, platform separation.Author and maintain Azure Policy – initiatives, assignments, exemptions – and the compliance reporting that goes with them.Implement RBAC and least-privilege access models.Write infrastructure as code—Terraform and OpenTofu primarily; Bicep and ARM where a customer standard requires it.Own cost management: budgets, capacity forecasting, consumption baselining, and runrate models that stand up when a finance director asks where the number came from.Configure Azure Monitor, Log Analytics, and diagnostic settings to a consistent standard.Design disaster recovery and backup strategy against agreed RPO and RTO targets.Run discovery: operate and interpret Azure Migrate, reconcile inventories from CMDB, virtualization platforms, and customer spreadsheets, and separate what is verified from what is merely claimed.Apply disposition frameworks across an estate – rehost, replatform, modernize, rebuild, ring-fence, retain, decommission – and build the migration waves that follow.Execute compute and storage migration, and plan cutover and legacy decommission. What you need Core requirements – every role in this department Every person in the department works this way. A gap here is closed before hire. Git. Branch, commit, rebase, resolve conflicts, and work through pull requests unaided.Everything we produce lives in a repository, including documents. Markdown. Fluent authoring, including tables and fenced code. Specifications, runbooks, and customer deliverables are Markdown in a repository before they become anything else.Visual Studio Code. Our standard editor, with a shared set of extensions and workspace conventions. Comfortable with the integrated terminal and source-control view.Claude Code and Codex. Working fluency with agentic coding tools. This is normal daily practice here. You drive them through real work and review what they produce as critically as a colleague’s pull request. You remain accountable for correctness: we do not ship what we do not understand.Linux. Shell navigation, reading logs, files and permissions, SSH, and following a command-line runbook without help.Role requirements 6+ years in cloud infrastructure, including at least 3 working in Azure at enterprise scale. Not a single subscription – a governed hierarchy with policy and separation of duties.Terraform or OpenTofu to production standard, including state management and module design. Your infrastructure code is reviewed like application code, in Git.Azure Policy in practice, including writing custom definitions rather than only assigningbuilt-ins. Azure Migrate hands-on, and the judgement to read its output critically rather than trusting it.Rigorous data work. A real part of this job is reconciling messy inventories at scale andbeing honest in writing about what is not known. Comfortable holding Owner or Contributor rights in a customer tenant and behaving accordingly.Eligible to work in Canada, and eligible to obtain security clearance. Nice to have Azure Solutions Architect Expert certificationPrivate Link and private endpoint topologies at scaleDr Migrate, or comparable assessment toolingVMware or Hyper-V estate experienceHaving handed a governed platform over to a customer’s own operations team Employment type: Permanent Work arrangement: Remote within Canada, with occasional travel to customer sites. The candidate should be in Canada with 3+ years of residency and preferably a PR/Citizen A link to a repository, a write-up, or an architecture you designed is worth more to us than a cover letter. TechIO is an equal opportunity employer. We welcome applications from everyone and are happy to make adjustments to the interview process on request – just tell us what would help.