Senior Cloud Engineer

Role overview

Key responsibilities

• Build multi-account AWS foundations with Organizations and Control Tower, including account structures, guardrails, and service control policies.
• Engineer secure networking and private connectivity with VPCs, routing, DNS, endpoints, PrivateLink, Cloud WAN, and Transit Gateway.
• Partner with Data teams on database and lakehouse infrastructure using RDS, Aurora, S3, Databricks, Glue, Lake Formation, Athena, and Redshift.
• Implement least-privilege IAM, permission boundaries, and cross-account access.
• Develop reusable Terraform modules and manage state, dependencies, and drift through the infrastructure lifecycle.
• Own GitHub Actions CI/CD pipelines, including reviews, testing, security scans, approvals, container builds, ECR publishing, promotion, and recovery.
• Automate manual infrastructure and repetitive tasks with IaC, scripts, API integrations, and self-service workflows.
• Deploy containerized and serverless workloads with runtime configuration, scaling, and secure secrets management.
• Embed logging, tagging, monitoring, and audit controls; maintain module documentation, architecture decisions, and runbooks; share knowledge across teams.

Experience and qualifications

• At least 6 years in cloud, platform, or DevOps engineering, including 4 years building and supporting production AWS environments.
• Strong Terraform experience, including reusable modules, remote state, resource imports, drift detection, and pipeline-driven lifecycle management.
• Strong AWS networking and IAM knowledge, including private connectivity, routing, DNS, least privilege, permission boundaries, and cross-account controls.
• Experience with GitHub Actions or similar CI/CD tools, Git collaboration, automated checks, approvals, and release recovery.
• Hands-on Docker, ECR, and AWS ECS, EKS, Fargate, or Lambda experience; secure configuration with Secrets Manager, Parameter Store, or similar tools.
• Experience using IaC and automation to replace manual processes and improve cloud reliability and scalability.
• Proficiency in Python, PowerShell, Bash, or similar scripting, including APIs and cloud SDKs; strong communication, collaboration, and documentation skills.
• AWS Solutions Architect Professional, DevOps Engineer Professional, or Advanced Networking Specialty certification is an asset.
• AI-assisted development or agent-based cloud solution experience or interest is an asset, including Bedrock, AgentCore Runtime, LLM architectures, or AI agents.

Work arrangement

• Flexible Work Program requires three days onsite per week at the Mississauga office.

Compensation

• Posted compensation is $126,500–$154,000 CAD and includes base salary and bonus.

Benefits

• Benefits include RRSP matching, an Employee Share Purchase Plan, annual bonus, employee discounts, and parental leave top-up.
• Health and lifestyle offerings include company-paid volunteer days, virtual doctor appointments, flexible benefits, and access to an onsite gym.
• Development offerings include tuition assistance, matched charitable donations, training, career coaching, mentorship, and leadership programs.
• Office amenities include free gated parking, a games room, snacks, and a fitness studio.

Additional information

• This posting is for an existing vacancy.
• Candidates considered for hire must pass a criminal background check, credit check, and validation of work experience.