Senior Infrastructure Architect - Security & Automation

OMERS•Toronto, ON

1d•CA$103,000 - CA$157,000•Hybrid

About The Position

This role reports into the Director, Enterprise Systems and Cloud Engineering and is part of a combined infrastructure team that owns architecture, build, and operations across OMERS’ core infrastructure platforms. In this role, you will help lead secure infrastructure design, automation, governance, and operations across Microsoft Azure, Google Cloud Platform, and Azure Local. You will also work to enable internal business and technology groups with secure, scalable platform solutions. This is one of three architect-level roles on the team, each with a distinct focus area. You will be working closely with these peer architects, the Systems Engineering Manager, systems engineers, cyber security, and other technology and business partners to deliver well-operated infrastructure outcomes.

Requirements

Senior-level experience designing, implementing, operating, or leading enterprise infrastructure solutions across hybrid cloud, on-premises platforms, compute, storage, networking, resiliency, governance, and security.
Strong hands-on expertise with Microsoft Azure, Azure Local, Azure Arc, Azure Policy, Defender for Cloud, RBAC, monitoring, and infrastructure governance controls.
Advanced understanding of enterprise operating system architecture for Windows Server and Linux, including infrastructure features such as Windows Failover Clustering, Storage Spaces Direct, Hyper-V virtualization, Linux server administration concepts, high availability, storage integration, networking, performance, and platform security.
Experience and proficiency with secure automation, scripting, infrastructure-as-code, and source control practices using tools such as GitHub, GitHub Actions, Terraform, PowerShell, pull requests (create/review/merge) and secrets management.
Ability to provide technical leadership in a combined architecture, engineering/operations team, including mentoring engineers, reviewing designs, supporting implementation, and acting as a senior escalation point.
Ability to work independently in a high-performing environment, remain accountable to agreed deadlines, and build strong relationships with internal business groups, technology teams, vendor partners, and external technical resources.
Strong communication, documentation, stakeholder management, problem-solving, prioritization, and time management skills, with the ability to build consensus, influence technical and non-technical partners, manage competing priorities, and align technical solutions to business needs.

Nice To Haves

Experience in financial services, pension, investment management, or another regulated enterprise environment.
Experience with container platforms or modern platform services such as Kubernetes, Docker, AKS, or GKE.
Experience with technology product evaluation, vendor engagement, platform roadmaps, operational resilience, or disaster recovery planning.
Relevant Microsoft, Google, security, automation, infrastructure, or DevOps certifications are considered an asset.

Responsibilities

Lead secure infrastructure architecture across Azure, Azure Local, Azure Arc-enabled services, and Google Cloud Platform. Typical deliverables include drafting infrastructure standards, reference patterns, operating models, and technical controls.
Act as one of the technical leads working on Azure Local with Azure ARC - our strategic platform. Includes secure platform design, automating workload placement, resiliency, security hardening and monitoring, and integration with Azure services.
Define and implement infrastructure governance using Azure Policy, Azure Arc, Defender for Cloud, RBAC, privileged roles, delegated access models, baseline configuration, and platform-level security controls.
Partner with cyber security and identity teams to translate enterprise security requirements into practical infrastructure designs, configurations, standards, and operating practices.
Lead secure automation practices for infrastructure management, including secure scripting standards, repository structure, pull request workflows, code reviews, approvals, secrets handling, reusable automation patterns, and GitHub-based controls.
Guide the use of automation and infrastructure-as-code tools such as Terraform, PowerShell, GitHub Actions, and related technologies to improve repeatability, auditability, security, and operational efficiency.
Provide hands-on technical leadership, design review, mentoring, and escalation support for systems engineers across design, build, implementation, operations and support activities.
Work with internal business and technology groups on project solutions that rely on infrastructure services, including platform selection, solution design inputs, implementation planning, operational readiness, risk discussions, disaster recovery planning, technical documentation, and vendor engagement.