Landing Zone Engineer – Azure Cloud Migration (36172)

Landing Zone Engineer – Azure Cloud Migration Location: Remote – Toronto/Ontario Preferred (Eastern Time Zone) Employment Type: Contract Contract Duration: 5 Months Start Date: December 2026 Work Schedule: 37.5 Hours per Week (7.5 Hours per Day) Position Overview We are seeking an experienced Landing Zone Engineer – Azure Cloud Migration to support a large-scale enterprise VMware-to-Microsoft Azure migration initiative. The successful candidate will be responsible for engineering, extending, and maintaining an existing Azure Landing Zone built using Terraform, ensuring the cloud infrastructure, networking, security, governance, and shared services are ready to support migration activities. Working closely with the Landing Zone Architect, cloud engineering teams, migration specialists, and network teams, this individual will develop and implement infrastructure-as-code (IaC) solutions within an established Azure environment. The existing landing zone will be extended to support migration-specific requirements, including network spokes, subscriptions, Azure Policy, shared SQL infrastructure, Oracle application connectivity, Citrix, and disaster recovery capabilities. This is a hands-on engineering role requiring strong expertise in Microsoft Azure, Terraform, Azure networking, GitHub Actions, infrastructure automation, and enterprise cloud migration environments. Key Responsibilities Azure Landing Zone Engineering & Infrastructure Development Build, configure, and extend Azure Landing Zone components using Terraform, including: Azure subscriptions and management group placement. Spoke virtual networks (VNets) and subnets. Network Security Groups (NSGs) and route tables. Hub-and-spoke networking and VNet peering. Private endpoints and Private DNS. Develop, maintain, and enhance reusable Terraform modules supporting migrated workloads, following established repository structures, coding standards, and module conventions. Implement Azure governance and security configurations as code, including Azure Policy assignments, Role-Based Access Control (RBAC), tagging, and diagnostic settings. Work within existing client GitHub repositories and collaborate with cloud engineering teams to ensure consistent infrastructure deployment practices. Shared Services, Database Connectivity & Citrix Infrastructure Engineer and deploy the shared SQL farm landing zone and associated disaster recovery configurations using Terraform, based on architectural designs. Implement network, DNS, and access configurations required to connect migrated applications to Oracle databases hosted on Azure. Collaborate with database platform teams responsible for the Oracle infrastructure. Build and configure Citrix landing zone components, including NetScaler networking and routing through centralized hub firewalls. Ensure shared infrastructure services are properly integrated with the Azure Landing Zone architecture. Disaster Recovery & Business Continuity Implement disaster recovery infrastructure patterns and configurations through Terraform. Configure paired-region networking, Azure Site Recovery components, and backup policies. Support infrastructure resilience, recovery readiness, and consistency across cloud environments. Terraform, Automation & DevOps Develop and execute infrastructure deployments through GitHub Actions pipelines across development, System Integration Testing (SIT), User Acceptance Testing (UAT), and production environments. Manage infrastructure changes through pull requests, code reviews, and established release procedures. Maintain Terraform remote state using Azure Storage, including state locking, resource imports, and state refactoring. Perform Terraform state management activities using moved blocks, import blocks, and Terraform state commands. Import migrated virtual machines and supporting Azure resources into Terraform following migration cutovers. Identify and resolve infrastructure configuration drift. Follow formal production change management procedures, including Change Advisory Board (CAB) approvals and scheduled change windows. Migration Readiness & Technical Support Prepare target Azure environments ahead of scheduled migration waves. Ensure required subnets, DNS records, firewall rule requests, network connectivity, and access configurations are established before workload cutovers. Collaborate with migration engineers, network teams, architects, and Microsoft support to troubleshoot infrastructure deployment and connectivity issues. Investigate and resolve routing, DNS, network security, and infrastructure provisioning problems. Support migration teams in ensuring environments are operationally ready for each migration phase. Documentation & Knowledge Transfer Develop and maintain technical documentation, including Terraform module READMEs, infrastructure design notes, and operational runbooks. Document deployment processes, infrastructure configurations, and troubleshooting procedures. Ensure solutions are maintainable and can be effectively supported by internal engineering and operations teams following project handover. Required Qualifications & Technical Experience Microsoft Azure Platform Minimum 5+ years of infrastructure engineering experience, including at least 3 years designing, building, or engineering Azure environments for enterprise organizations. Hands-on experience working with Azure Landing Zones aligned with the Microsoft Cloud Adoption Framework (CAF). Strong understanding of Azure management groups, subscriptions, Azure Policy, and RBAC. Working knowledge of Azure compute, storage, Key Vault, Recovery Services, and Log Analytics. Experience engineering and extending existing enterprise Azure environments. Azure Networking Strong hands-on experience with Azure networking technologies, including: Hub-and-spoke network architectures. Virtual networks, subnets, and VNet peering. User-defined routes (UDRs) and Network Security Groups (NSGs)