Senior Cloud DevOps Engineer

We are looking for a Senior Cloud DevOps (SRE) Engineer to design, implement, operate, and continuously improve our cloud infrastructure and DevOps capabilities on AWS.

This is a hands-on senior engineering role with significant responsibility for production environments, CI/CD, cloud security, deployment, monitoring, troubleshooting, and operational reliability. The successful candidate will work closely with application, data, security, and technology teams to ensure that our platforms are secure, scalable, highly available, and compliant with applicable privacy and regulatory requirements.

The ideal candidate has strong practical experience with AWS and cloud-native DevOps, understands how to operate production systems in a regulated environment, and is comfortable troubleshooting complex infrastructure and application issues. The candidate will also help build a security-first delivery process, where security checks are built into the CI/CD pipeline from the start (shift-left security). The candidate will control how code from our development teams is reviewed, released, and deployed to production.

Key Responsibilities

• Design, implement, and maintain secure and highly available AWS cloud infrastructure.
• Manage AWS production environments across networking, compute, storage, databases, IAM, logging, monitoring, and security services.
• Apply AWS Well-Architected Framework principles across Security, Reliability, Performance Efficiency, Cost Optimization, and Operational Excellence.
• Implement infrastructure using Infrastructure as Code (IaC) and maintain consistent environments across development, testing, and production.
• Support highly available and resilient architectures, including Multi-AZ deployments, backup, disaster recovery, and business continuity.

2. CI/CD & DevOps

• Design, build, and maintain enterprise-grade CI/CD pipelines for application and infrastructure deployment.
• Automate build, test, security scanning, deployment, rollback, and release processes.
• Establish controlled promotion processes across UAT to Production with approval gates and separation of duties.
• Manage source-code repositories, branching strategies, artifact repositories, deployment automation, and release management.
• Own the organization’s source-code repositories, CI/CD pipelines, release process, and production environment. Review code changes from internal and external development teams and make sure that only approved changes reach production.

3. Production Operations & Troubleshooting

• Take ownership of AWS production environments and ensure their availability, reliability, and operational health.
• Troubleshoot production incidents involving applications, infrastructure, networking, databases, deployments, performance, and integrations.
• Monitor system health, application performance, infrastructure metrics, logs, alerts, and operational events.
• Participate in incident response, escalation, remediation, and post-incident reviews.

4. Cloud Security & IAM

• Implement security controls across network, compute, storage, databases, APIs, and CI/CD pipelines.
• Integrate security scanning and vulnerability management into the software delivery lifecycle, following shift-left security principles so that problems are found early.
• Work with development teams and independent third-party vendors on application security testing, including penetration testing, static (SAST), dynamic (DAST), and interactive (IAST) testing, and track the fixing of findings.

5. Privacy, Compliance & Regulatory Requirements

• Ensure cloud infrastructure and DevOps practices comply with applicable privacy, security, data residency, and regulatory requirements.
• Understand the implications of handling PII and sensitive financial/customer data in cloud environments.
• Implement appropriate controls for data protection, encryption, access control, logging, retention, and data transfer.
• Understand and apply relevant OSFI B-10 and B-13 expectations in cloud, technology, third-party/vendor management, cybersecurity, and operational resilience.

6. Application & Data Platform Support

• The candidate should have sufficient technical knowledge to troubleshoot and support applications and data platforms, including some experience with: Java / Spring Boot, Vue.js, MySQL, Apache SeaTunnel, Apache Doris, DolphinScheduler, Apache Superset

Required Qualifications

• 7+ years of professional experience in DevOps, C