Azure Infrastructure and Identity Architect Alberta Ontario

Azure Infrastructure and Identity Architect

We are hiring an experienced Azure Infrastructure and Identity Architect to lead our most complex Microsoft Azure and Identity engagements to build the AI Foundations for our clients. This is a senior, client-facing role that sits at the intersection of architecture, delivery, and presales. You will own the technical shape of multi‑workstream deals, set the architectural direction for landing zones and identity foundations, and act as a trusted advisor to client executives and engineering teams alike.

The primary objective of this role is to architect and solution AI Azure platforms for our clients. You are expected to operate with a high degree of autonomy: scope work from opportunities, defend estimates with the sales team, and walk into a delivery with a credible plan on day one. You will also help mature the practice itself, codifying reusable accelerators, mentoring more junior consultants, and contributing to our Microsoft partner alignment.

• Lead technical sales motions end-to-end, from discovery through deal closure. Translate ambiguous client needs into a credible technical approach, phased roadmap, and commercial model (T&M, fixed-fee).
• Author the technical content of Statements of Work, proposals, including assumptions, deliverables, RACI, and exit criteria.
• Build and defend bottom‑up estimates; size delivery teams; identify and price in risk, dependencies.
• Deliver executive-level presentations, demos, and architecture walkthroughs; convert technical credibility into pipeline.
• Serve as the lead architect across one or more concurrent Azure engagements; own the end-to-end technical quality of what we ship.
• Set architectural direction for Azure Landing Zones aligned to CAF and WAF and properly sized to support our clients’ AI workloads.
• Design and oversee implementation of hub-and-spoke and Virtual WAN network topologies, including Azure Firewall/NVA strategy, Private Link, DNS, Express Route, and segmentation patterns.
• Define the identity foundation:
  Microsoft Entra t design, hybrid identity, Conditional Access, PIM, Entra .
• Shape and lead on-prem to Azure migration programs: assessment with Azure Migrate, wave planning, replatform vs. rehost decisions, cutover strategy, and decommissioning. Cover VMware, Hyper‑V, physical, and database workloads.
• Security and governance:
  Microsoft Defender for Cloud, Azure Policy, role‑based access control, key and secret management, logging and monitoring (Azure Monitor, Log Analytics, Sentinel handoffs).
• Mentor more junior consultants; run internal architecture reviews and design clinics.
• Contribute to and curate practice IP: reference architectures, IaC modules, assessment templates, runbooks, and migration playbooks.
• Stay current with the Azure and Entra roadmaps.

• 10+ years in IT infrastructure, with 6+ years designing and delivering on Microsoft Azure in a consulting or large‑enterprise environment using IaC.
• Demonstrable track record as the lead architect on substantial Azure engagements (landing zone build‑outs, large‑scale migrations, or enterprise identity modernization).
• Direct experience in a billable consulting model, including pre‑sales contribution and ownership of SOWs.
• Networking & security: hub‑and‑spoke, Virtual WAN, Azure Firewall, NSGs and ASGs, Application Gateway/Front Door/WAF, Private Link and Private DNS, Express Route, site‑to‑site VPN, DDoS protection.
• Identity:
  Entra t architecture, hybrid identity (Entra Connect, Cloud Sync, ADFS where relevant), Conditional Access design, MFA and passwordless rollouts, PIM, Entra , B2B/B2C, workload identities and managed identities.
• Infrastructure as Code: production experience with Terraform.
• Governance, monitoring, and cost:
  Azure Policy and Initiatives, Microsoft Defender for Cloud, Azure Monitor, Log Analytics, cost management and Fin Ops fundamentals.
• Working knowledge of Microsoft 365 / Intune / Defender boundaries with Azure infrastructure work, sufficient to scope adjacent work streams and route them appropriately.

$130,000 - $180,000 CAD

Lantern is committed to fair and equitable compensation practices. Actual compensation will depend on the individual’s skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.