Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Own the Azure platform for Thomson Reuters product engineering teams, including infrastructure, networking, identity, AKS, and deployment pipelines. Focus on improving the user experience for standing up compliant services, troubleshooting, and audit confidence. This role supports global infrastructure rollouts, requiring consideration for data residency, regional compliance, and cross-region resilience. It is a hands-on senior individual contributor position with broad technical authority, involving Bicep development, AKS operation, infrastructure change review, architectural discussions, and leading technical responses during compliance audits.

Responsibilities

Own infrastructure as code, defining, extending, and maintaining the Azure estate in Bicep, deployed through automated pipelines with peer review and preview gates.
Operate Kubernetes at production scale, owning the AKS platform end to end, including cluster architecture, upgrades, node pool strategy, networking, workload identity, autoscaling, resource governance, and cost.
Support engineering teams running workloads on AKS and act as their escalation path for cluster issues.
Administer Entra ID (Azure AD) for engineering, managing RBAC design, least-privilege role assignments, PIM, just-in-time elevation, managed identities, workload identity federation, and access reviews.
Serve as the platform subject-matter expert for SOC 2, HIPAA, and ISO 27001 audits, producing evidence, explaining controls, and closing findings.
Encode controls as Azure Policy for continuous enforcement.
Design regional deployment patterns that satisfy data residency and sovereignty obligations while maintaining platform coherence and operability.
Consult with engineering teams on infrastructure decisions, including service design, data store selection, network posture, scaling strategy, and cost.
Design for scale using Azure’s scaling primitives to meet application demand predictably and economically.
Own resilience by designing and testing multi-AZ and multi-region architectures, defining RTO/RPO, and building and rehearsing disaster recovery and backup restore procedures.
Build and troubleshoot using Log Analytics, Container Insights, and Application Insights, writing KQL, designing alerts, and helping teams define SLOs.
Manage secrets in Key Vault, drive Defender for Cloud and Defender for Containers findings to resolution, and oversee patching, image hygiene, and vulnerability remediation.
Maintain tagging and showback for cost management, and drive right-sizing and commitment-based savings.
Participate in incident response, join the on-call rotation, lead or contribute to blameless postmortems, and implement durable fixes.
Write documentation, build reusable Bicep modules and templates, mentor engineers, and raise the bar in design and code review.

Requirements

5+ years operating Microsoft Azure in production for cloud-native applications, including at least one environment with real availability and compliance obligations.
Production AKS or equivalent Kubernetes experience, including cluster operation, upgrades, node pool design, ingress and cluster networking, autoscaling, workload identity, and debugging under load.
Deep infrastructure-as-code practice with Bicep (or strong ARM/Terraform experience and readiness to work primarily in Bicep), including modules, deployment stacks, what-if, and pipeline-driven deployment.
Hands-on Entra ID / Azure AD administration, including RBAC, conditional access, PIM, service principals, and managed identities.
Demonstrated role in a SOC 2, HIPAA, or ISO 27001 audit as a technical expert.
Azure networking fluency, including VNets, subnets, NSGs, private endpoints and Private DNS, hub-spoke topology, Front Door / Application Gateway / WAF, and cross-region connectivity.
Strong troubleshooting skills in Log Analytics and Application Insights, including writing KQL.
Practical knowledge of Azure scaling and resilience, including autoscale, availability zones, paired-region strategies, and failover testing.
Working proficiency in at least one programming language (Python, Go, C#, or similar) plus PowerShell or Azure CLI for automation.
CI/CD experience with Azure DevOps or GitHub Actions.
Ability to influence without authority, understanding constraints and improving plans in design reviews.

Skills

Bicep
AKS
Kubernetes
Entra ID
Azure AD
RBAC
PIM
SOC 2
HIPAA
ISO 27001
Azure networking
VNets
NSGs
Private DNS
Log Analytics
Application Insights
KQL
Autoscale
Availability Zones
Python
Go
C#
PowerShell
Azure CLI
Azure DevOps
GitHub Actions
Infrastructure as Code
CI/CD
Disaster Recovery
Backup Restore
Key Vault
Defender for Cloud
Defender for Containers
Azure Policy
FinOps
GitOps

Location

Canada

Work Type

Hybrid
Full-time

Experience Level

Senior
5+ years

Salary/Compensations

$140,600 CAD - $190,600 CAD

Benefits

Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Work from anywhere for up to 8 weeks per year

About the Company

Thomson Reuters informs the way forward by bringing together trusted content and technology for decision-making. We serve professionals in legal, tax, accounting, compliance, government, and media. Our products empower professionals with data, intelligence, and solutions. Reuters is a world leading provider of trusted journalism and news.
We are powered by 26,000 employees across more than 70 countries, fostering a culture of continuous learning and skill development in flexible work environments.
We are committed to objectivity, accuracy, fairness, and transparency.
We are a global business that relies on the unique backgrounds, perspectives, and experiences of all employees.
More information about Thomson Reuters can be found on thomsonreuters.com.

Equal Opportunity

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.
We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law.