Senior CloudOps Architect

Senior CloudOps Architect — Total ETO
CloudOps · CloudSecOps · DevOps · FinOps · SRE

About Total ETO and this role
Total ETO provides ERP software purpose-built for engineer-to-order (ETO) manufacturers — companies that design, build, and deliver highly customized products. Our customers rely on us to run mission-critical operations across engineering, procurement, production, and financials. We are a 27-year, 100% remote company with a culture of ownership.

We are seeking a Senior CloudOps Architect to own the architecture, security, reliability, and cost-efficiency of the Azure platform behind our SaaS product, reporting to the President. You will set direction across CloudOps, Cloud Security (CloudSecOps), DevOps, FinOps, and Site Reliability Engineering (SRE), moving fluidly between high-level architecture and hands-on implementation. The role will evolve quickly as we scale our hosting business and adopt AI — we already work AI-first in CloudOps and expect you to use it as a force multiplier.

You will inherit an established, heavily automated Azure estate — a mature platform to advance, not a greenfield build.

This posting represents one existing vacancy. Total ETO is considering candidates at either the CloudOps Engineer or Senior CloudOps Architect level. One candidate will be hired, with the final position title, responsibilities and compensation determined based on the successful candidate’s experience and qualifications.

Job Type: Full-Time Remote, Permanent
Salary range: $115,000 – $140,000 CAD. This range reflects experience and the unique skills each candidate brings to the role.

Your First Year
• Secure customer-data platform — design and build an on-demand, single-tenant environment for working with sensitive customer data: ephemeral, region-resident, egress-controlled, and fully audited, so production data never lands on personal devices.

• Compliance foundation — use it to anchor our CMMC / CPCSC Level 1 self-assessment as we open regulated and defense markets.

Key Responsibilities

Cloud Architecture & CloudOps
• Lead the end-to-end architecture of our multi-subscription Azure estate — hosting, edge, monitoring, and internal tooling
• Design and maintain infrastructure-as-code (Bicep / Azure Verified Modules) as the single source of truth for every environment
• Provision, scale, and operate customer hosting environments on Windows Server, IIS, and SQL Server

Cloud Security (CloudSecOps)
• Architect the edge and identity layers: Azure Front Door + WAF, per-customer access controls, Key Vault, and managed identities
• Enforce least-privilege access, encryption in transit and at rest, and secure-by-default baselines across the estate
• Advance our compliance posture (e.g., CMMC, CPCSC, SOC 2-style controls) to support growth into regulated and defense markets

DevOps
• Design and operate CI/CD release pipelines (Azure DevOps) that ship infrastructure and application changes safely and repeatably
• Automate operational work in PowerShell — deployments, provisioning, secret rotation, and scheduled jobs
• Champion “paved-road” workflows and code review so nothing ships by hand

FinOps
• Treat cloud cost as a first-class design constraint — right-sizing, tagging, and spend visibility across subscriptions (Azure Cost Management, budgets and alerts, reservation planning)
• Forecast and optimize run-rate cost without compromising reliability or security
• Bring cost trade-offs into architecture decisions up front, not after the invoice

Site Reliability Engineering (SRE)
• Design and run the monitoring, alerting, and incident pipeline (Azure Monitor, Log Analytics, Logic Apps, Event Grid to Jira / PagerDuty)
• Define service levels and runbooks, lead incident response, and drive blameless post-incident reviews
• Maintain backup/restore and disaster-recovery practices for customer-facing systems

Qualifications & Experience
• 8+ years in cloud infrastructure, platform, DevOps, or SRE roles, including senior or architect-level ownership
• Deep hands-on Microsoft Azure expertise across compute, networking, identity, security, edge (Front Door / WAF), and event-driven services (Logic Apps, Event Grid)
• Strong infrastructure-as-code discipline (Bicep or Terraform), and CI/CD pipeline design (Azure DevOps, GitHub Actions, or similar)
• Proficiency automating in PowerShell (or equivalent) on a Windows / SQL Server / IIS SaaS stack
• Command of at least three of CloudOps, CloudSecOps, DevOps, FinOps, and SRE — and the appetite to own all five

Nice to Have
• Azure certifications (Solutions Architect Expert, DevOps Engineer, or Security Engineer)
• FinOps Certified Practitioner, or a track record of measurable cloud cost savings
• Experience with compliance frameworks (CMMC, CPCSC, SOC 2, ISO 27001)
• A track record of integrating AI-assisted engineering into daily operations
• ERP, manufacturing, or engineer-to-order domain exposure

Key Traits for Success
• Takes ownership — treats the platform as their own and drives outcomes without being asked
• Forward-thinking — designs for where we are going, not just where we are
• Self-directed and pragmatic — makes sound trade-offs with incomplete information
• Communicates clearly — writes concise docs and decisions others can act on

Work Environment
• Fully remote role open to candidates in Canada who are legally eligible to work in Canada
• Employees are expected to provide and maintain an appropriate home office setup; reliable internet and a professional remote workspace are required
• Participation in a shared on-call rotation, with occasional after-hours or weekend work for incident response and maintenance windows, as part of a standard 40-hour week

Application Process
We do our best to ensure every application is reviewed by a real person. Because of the number of applications we receive and the needs of our day-to-day work, we may use AI tools to support our review process as needed.

Candidates selected to move forward will begin with a phone screening, followed by a video interview and/or a role-related technical assessment, depending on the position.

We sincerely appreciate the interest of all applicants; however, we are only accepting applications from candidates authorized to work and residing in Canada. We are unable to support international applications or sponsorship for this role.