Senior DevOps Engineer, Compliance

This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop and manage multi-cloud infrastructure on AWS and GCP.

• Oversee and automate AWS services such as EKS, EC2, IAM, and S3.

• Oversee and automate GCP services including GKE, Cloud Functions, and BigQuery.

• Sustain and enhance Terraform infrastructure as code, focusing on provisioning and drift detection.

• Migrate and optimize workloads for Neo4j Fabric, Airbyte, Kafka, and dbt across cloud platforms.

• Set up GPU-enabled EC2 instances and manage cost efficiency through Spot instances and TCO tracking.

• Implement Sumo Logic and OpenTelemetry pipelines for organized logging and distributed tracing.

• Configure Slack alerting segmented by environment and maintain health and cost monitoring dashboards.

• Take ownership of and enforce CI/CD pipelines using GitHub Actions.

• Integrate Codecov, SonarQube, and dbt testing into CI/CD workflows.

• Ensure builds are reproducible and logs are audit-ready.

• Manage IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.

• Handle secrets with 1Password CLI and scan codebases using TruffleHog and GitGuardian.

• Set up Lambda/GCS malware scanning for file storage.

• Automate the collection of SOC 2 control evidence and integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.

• Maintain organized audit folders across GCS/S3, Jira, and Confluence.

• Assist in quarterly access reviews and monitoring of rotation.

• Deliver workload migrations, Terraform provisioning, centralized logging, distributed tracing, CI/CD enforcement, and SOC 2 evidence automation within the first 90 days.

• Collaborate closely with the CTO and engineering leaders.

⛳️ Requirements

• Minimum of 5 years of experience in DevOps, SRE, or Cloud Infrastructure roles.

• Demonstrated experience in AWS and GCP operations, preferably in a multi-cloud environment.

• Expertise in Terraform, GitHub Actions, and best practices for Infrastructure as Code (IaC) security.

• Familiarity with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).

• Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.

• Experience in implementing SOC 2 / ISO 27001 security and evidence frameworks.

• Excellent written and verbal communication skills in English.

• Experience with B2B contractor engagement.

• Nice-to-have: experience with Prometheus/Grafana dashboards.

• Nice-to-have: previous work with 1Password CLI, Auth0, or Salesbricks.

• Nice-to-have: familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tools.

🏝️ Benefits

• Flexible working hours.

• Fully remote work environment.

• Annual performance evaluations and bonus potential.

• Autonomy and complete ownership of the infrastructure and compliance stack.

• Access to modern tools without the constraints of legacy systems or bureaucracy.