Cloud Architect

• Back to search results

Apply By: Wednesday, February 4, :59 pm EST

Cloud Architect

Job ID:

240168

Posting status:

Open

Organization:

Ontario Clean Water Agency

Division:

Information Technology

City:

Mississauga

Position(s) language:

English

Job term:

1 Permanent

Job code:

6A003 - InformationTechnology06

Salary:

$84, $124,487.00 Per year

The Ontario Clean Water Agency (OCWA) believes in Our Communities, Our Environment and Our People. As a trusted partner to municipalities, First Nations communities, businesses, governments and institutions across Ontario, we provide our clients with total solutions in water and wastewater. We are dedicated to working closely with our clients to help them build healthy sustainable communities and organizations and provide safe and reliable drinking water to thousands of Ontarians each day.

About the job

In this role you will:

• Develop and implement project plans, in consultation with OCWA and external stakeholders, for Microsoft 365 and Entra ID initiatives, including identity, collaboration, endpoint management, security and compliance projects. This includes the development of business cases, architectural options, risk assessments, and the coordination of project submissions through established governance and approvals processes.
• Lead the enterprise architecture, design, implementation and optimization of the Microsoft 365 and Entra ID ecosystem, ensuring all services operate as a secure, integrated and well-governed platform aligned with OCWA standards and OPS requirements.
• Lead province-wide initiatives related to cloud identity, collaboration, endpoint management and security, including tenant configuration, service modernization, feature adoption, and continuous improvement across Microsoft 365 and Entra ID services.
• Serve as the enterprise owner for Microsoft cloud productivity, identity and security platforms, including Entra ID (cloud and hybrid identity, authentication, conditional access, RBAC, PIM, identity lifecycle governance); Microsoft 365 (Exchange Online, SharePoint Online, Teams, OneDrive); and associated security and compliance services.
• Lead the design, implementation and governance of endpoint and device management using Microsoft Intune, including device enrollment, compliance policies, configuration profiles, security baselines, application deployment, update strategies, and enforcement of device-based conditional access across Windows, macOS, iOS and Android platforms.
• Lead the design and implementation of data protection, compliance and information governance controls using Microsoft Purview, including sensitivity labels, data classification, retention policies, audit, eDiscovery, Insider Risk Management and Data Loss Prevention (DLP).
• Implement cloud and system change management processes that conform with GO-ITS Systems Development Life Cycle best practices, OPS security policies, and OCWA governance standards for Microsoft 365 and Entra ID services.
• Plan and manage projects for the design, development and implementation of Microsoft cloud architecture models, standards, operating procedures and configuration baselines, and make operational decisions related to assigned initiatives to achieve objectives within required timelines.

• Provide technical leadership, guidance, advice and subject matter expertise for Microsoft 365, Entra ID and cloud security services to assigned project team members and consultants, including setting work priorities, assigning initiatives, providing ongoing technical direction, and reviewing and approving changes through established change management processes.

• Conduct regular cloud identity, endpoint, security and compliance assessments, including configuration reviews, access governance audits, device compliance evaluations and security posture assessments, and implement appropriate mitigation measures.

• Collaborate with cybersecurity, infrastructure, application and operational teams to ensure the integration of Microsoft 365 and Entra ID security best practices into all IT and OT technology initiatives across the organization.

What you bring to the team
Knowledge and Skills:

• Knowledge of enterprise Microsoft 365 and Entra ID architecture and operations, including tenant design and configuration; cloud and hybrid identity; authentication and authorization models; conditional access; role-based access control (RBAC); privileged identity management (PIM); identity lifecycle governance; and Zero Trust security principles.
• Knowledge of Microsoft 365 services and workloads, including Exchange Online, SharePoint Online, Teams, OneDrive and associated collaboration, messaging, and productivity services, including service configuration, security controls, availability, performance and lifecycle management.
• Knowledge of endpoint and device management methodologies using Microsoft Intune, including device enrollment and provisioning, compliance policies, configuration profiles, security baselines, application deployment, update and patching strategies, mobile application management (MAM), and multi-platform device support (Windows, macOS, iOS, Android).
• Knowledge of cloud security, compliance and information governance platforms, including Microsoft Purview (data classification, sensitivity labels, retention, audit, eDiscovery, Insider Risk Management and Data Loss Prevention) and Microsoft Defender XDR (Defender for Endpoint, Office 365, Identity and Cloud Apps), including security monitoring, alerting, investigation and response.
• Knowledge of cloud identity and access security methodologies, including identity protection, threat detection, risk-based access controls, device-based access enforcement, and secure integration of SaaS applications.
• Knowledge of system development life cycle methodologies; cloud solution integration; management, evaluation and control mechanisms; change and release management; business analysis; cloud architecture and service design; capacity planning; quality assurance; risk and problem management; business continuity and disaster recovery planning; and applicable standards, trends, methods, tools and techniques.
• Knowledge of IT and cloud security architecture principles, including vulnerability assessment methodologies, secure configuration baselines, security design, security posture management, and continuous improvement practices.
• Knowledge of cybersecurity principles and best practices across IT and OT environments, including risk management, incident response, threat monitoring, and coordination with enterprise security operations and external partners.
• Knowledge of regulatory, policy and compliance requirements applicable to cloud services, identity management, data protection and cybersecurity within the OPS/OCWA environment, including alignment with GO-ITS standards and industry best practices.
• Relevant certifications or equivalent experience in Microsoft cloud architecture, identity, security and endpoint management, such as Microsoft 365 Administrator (MS-102), Identity and Access Administrator (SC-300), Information Protection and Compliance Administrator (SC-400), Endpoint Administrator (MD-102), Cybersecurity Architect (SC-100) or Azure Solutions Architect Expert (AZ-305).

Interpersonal, Communication and Analytical Skills:

• Ability to lead the planning and delivery of multiple, concurrent Microsoft 365 and Entra ID initiatives across the OCWA enterprise, coordinating work across identity, collaboration, endpoint management, security and compliance domains.
• Demonstrated project leadership skills, including planning, estimating, scheduling, prioritization, monitoring and controlling work activities, to manage complex, large-scale cloud platform, identity and security initiatives within established timelines and governance frameworks.
• Strong research, analytical, evaluation and problem-solving skills to assess cloud identity, collaboration, endpoint and security requirements, analyze risks and impacts, and develop practical, scalable architectural solutions.
• Customer service and advisory skills to ensure interactions with internal and external stakeholders reflect a high level of consultation, negotiation, facilitation and presentation ability, particularly in translating complex Microsoft 365 and Entra ID concepts into clear, business-aligned recommendations.
• Communication, facilitation and advisory skills to develop and maintain effective working relationships and to provide guidance, conduct meetings, and deliver briefings or training sessions with senior management, operational leadership, technical staff, clients and other stakeholders.
• Consultation and collaboration skills to work effectively with cybersecurity, infrastructure, application, operations and vendor partners, ensuring alignment on cloud identity, security, compliance and governance objectives.
• Strong oral and written communication skills to document architectural standards, configurations, governance models and operating procedures, and to provide ongoing technical expertise and advisory support related to the Microsoft 365 and Entra ID ecosystem.

Don't meet every qualification?

If you are excited about this position and meet most, but not all, of the listed qualifications, please still consider applying. We recognize that no one person might have every qualification in this job ad, and you just might be the right candidate

How we support diversity, inclusion and accessibility

We are building an inclusive workforce that reflects the communities we serve. We encourage everyone interested in working with us to apply, including people with disabilities, Indigenous, Black and racialized individuals, as well as people from all ethnicities, cultures, sexual orientations, gender identities and gender expressions.

Our hiring process is accessible, consistent with Ontario's Human Rights Code and the Accessibility for Ontarians with Disabilities Act, 2005. We are working to prevent and remove barriers in our hiring processes and can offer accommodation to address specific needs related to Code-protected grounds such as disability, family status and religion. For more information about accommodation during the hiring process please contact us.

Learn more about the work the OPS is doing to create an inclusive, anti-racist, accessible and diverse workplace:

• diversity, equity and inclusion initiatives
• accessibility
• Anti-Racism Policy

What we offer

• Flexible learning and development opportunities.
• Opportunities for career advancement and specialization with the largest provider of water and wastewater services in Ontario.
• Work with the partner of choice for more communities than any other water and wastewater service organization in Ontario for over 30 years.
• Work with an organization committed to innovation and advanced technology.
• A defined benefit pension plan; Comprehensive Health Plan; Life and Disability Insurance.
• Maternity and parental leave top-up benefits including for adoptive parents.

Additional information:

Apply by:

Wednesday, February 4, :59 pm EST

Position details:

• 1 English Permanent, 2085, Hurontario St, Mississauga, Central Region

Compensation group:

Association of Management, Administrative and Professional Crown Employees of Ontario

Work hours:

Schedule 6

Category:

Information Technology

Posted on:

Wednesday, January 14, 2026

Note:

• T-AQ-240168/26

How to apply:

• You must submit your application using only one of the methods identified below.

• Your cover letter and resume combined should not exceed five (5) pages. For tips and tools on how to write a concise cover letter and resume, review the Writing a Cover Letter and Resume: Tips, Tools and Resources.

• Customize your cover letter and resume to the qualifications listed on the job ad. Using concrete examples, you must show how you demonstrated the requirements for this job. We rely on the information you provide to us.

• Be sure to quote the Job ID number for this position.

• OPS employees are required to quote their WIN EMPLOYEE ID number when applying.

Send application to:

Send resume with covering letter (PDF preferred) saved as OCWA-206-25–IT-First Last Name to:

Ontario Clean Water Agency

Hiring Manager: Chris Risteski

Attention: Vana Mariyan

Language requirements and assessment:

All external Ontario Public Service (OPS) job ads are posted in English and French. Check the "position(s) language" section at the top of each job ad for the language requirements. For all roles, candidates are assessed in English, the business language of the OPS. If the position is bilingual (English/French), you'll also need to pass a French-language proficiency test.

Exigences en matière de langue et évaluation:

Toutes les offres d'emploi externes de la fonction publique de l'Ontario (FPO) sont affichées en français et en anglais. Consultez la section « Langue du ou des postes » en haut de chaque offre d'emploi pour connaître les exigences linguistiques. Pour tous les postes, les candidats sont évalués en anglais, la langue d'affaires de la FPO. Si le poste est bilingue (anglais/français), vous devrez également passer un test de compétences linguistiques en français.

All external applicants (including former employees of the Ontario Public Service) applying to a competition in a ministry or Commission public body must disclose (either in the cover letter or resume) previous employment with the Ontario Public Service. Disclosure must include positions held, dates of employment and any active restrictions as applicable from being rehired by the Ontario Public Service. Active restrictions can include time and/or ministry-specific restrictions currently in force, and may preclude a former employee from being offered a position with the Ontario Public Service for a specific time period (e.g. one year), or from being offered a position with a specific ministry (either for a pre-determined time period or indefinitely). The circumstances around an employee's exit will be considered prior to an offer of employment.

Information collection notice

We are collecting your personal information to assess how well you meet the qualifications for employment with the Ontario Public Service, and for related recruitment purposes. The collection of personal information is necessary to the proper administration of OPS Careers, which is an authorized common service in accordance with s. 6 of the Ministry of Government Services Act, R.S.O. 1990, c. M.25.

Please do not include any more personal information than is needed for your application (for example, do not include your photograph or social insurance number).

If you have any questions about how your information is collected, used, shared or saved, please contact us.

Strengthening Ontario, together

---