Cloud Migration Architect/Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Navigate and resolve issues within a complex brownfield estate that includes end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies.

• Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (both Internal and External models) without any downtime.

• Write, maintain, and deploy infrastructure exclusively using Terraform within an existing codebase and GitHub Actions CI/CD pipelines.

• Operate and troubleshoot pipelines utilizing Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication.

• Ensure that all architectural modifications fully comply with HIPAA and PIPEDA frameworks.

• Manage active IPsec VPN tunnels connecting on-premises systems, GCP, and various third-party functional sites.

• Utilize AI prompting tools to enhance current-state understanding, identify hidden dependencies, and reduce discovery time.

⛳️ Requirements

• Demonstrated experience in navigating complex, undocumented brownfield environments.

• Background in managing end-of-life operating systems, single Active Directory domains that span production/non-production environments, and unmapped subnets.

• Capability to make informed judgment calls during delivery when discovery exposes unforeseen infrastructure challenges.

• Extensive knowledge of GCP-native architecture, including hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organization policy management.

• Strong comprehension of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration.

• Advanced hands-on experience with Terraform in a zero click-ops environment.

• Practical experience with GitHub Actions, WIF, and keyless authentication (no service account keys permitted).

• Previous experience in highly regulated settings under HIPAA and/or PIPEDA frameworks.

• Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads.

• Ability to deliver high-quality infrastructure solutions within tight, contractually mandated datacenter exit timelines.

🏝️ Benefits

• Offers Bonus