Senior DevOps & Compliance Engineer (Canada Remote)

About the Role

Responsibilities

Infrastructure & Automation

• Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.
• Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.
• Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.
• Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).

Observability & Monitoring

• Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing. Configure Slack-based alerting segmented by environment (dev, staging, prod).
• Maintain health and cost dashboards across AWS, GCP, and data platform services.

CI/CD Governance

• Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).
• Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.
• Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).

Security & Secret Management

• Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.
• Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.
• Configure Lambda/GCS malware scanning for file storage.

SOC 2 Compliance Automation

• Automate control evidence collection (logs, screenshots, IAM diffs).
• Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.
• Maintain structured audit folders (GCS/S3, Jira, Confluence).
• Support quarterly access reviews and rotation monitoring.

Skills & Experience

Must-Have:

• 5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.
• Proven background in AWS and GCP operations, ideally multi-cloud.
• Proficient with Terraform, GitHub Actions, and IaC security best practices.
• Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).
• Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.
• Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.
• Strong English communication (written and spoken).

Nice-to-Have:

• Experience with Prometheus/Grafana dashboards.
• Prior work with 1Password CLI, Auth0, or Salesbricks.
• Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling. What You’ll Deliver in the First 90 Days
• Migrate GKE → EKS workloads and automate environment provisioning via Terraform.
• Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).
• Implement CI/CD enforcement (coverage, schema validation, secrets scanning). Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).

Work Setup

Why Join Tie

• We’re building a modern data & identity infrastructure powering eCommerce personalization.
• You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.
• You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.
• $100K budget for the role, with annual performance and bonus upside.

How to Apply