telus-digital - Cloud Migration Architect/Engineer
Requirements
• 1. Critical Legacy Infrastructure Experience • Proven track record of working in complex, undocumented brownfield environments. • Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets. • Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises. • 2. GCP & Networking Expertise • Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management. • Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration. • 3. Terraform & CI/CD Pipelines • Advanced, hands-on Terraform experience (zero click-ops environment). • Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed). • 4. Security, Compliance & Regulation • Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks. • Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads. • 5. Delivery Under Pressure • Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines.
Responsibilities
• 1. Legacy Migration: Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies. • 2. Load Balancing Adaptation: Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime. • 3. Infrastructure as Code: Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines. • 4. Secure Pipeline Management: Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication. • 5. Security & Compliance: Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks. • 6. Hybrid Connectivity: Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites. • 7. AI-Driven Discovery: Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.
Benefits
• CA$125K – CA$135K • Offers Bonus • Upload your resume here to autofill key application fields. • Drop your resume here! • Parsing your resume. Autofilling key fields... • Please enter your full legal name • Where are you currently located? • or drag and drop here • Prefer not to say • Not represented here • Prefer not to say • Black/African descent • Hispanic/Latino/Latinx (ex. Identify as Hispanic or Latino with ties in Latin America, and can be of any race) • Indigenous (ex. Aboriginal Australian, Alaska Native, First Nations, Native American, Native Hawaiian, Samoan) • Middle Eastern/North African • White/European descent • Prefer not to say • No, I don't have a disability • Yes, I have a disability • Prefer not to say • I acknowledge that I have reviewed and agree to TELUS Digital's Recruiting Privacy Policy regarding the processing of my personal data for recruitment purposes. • Note: The consent period lasts for 2 years • Recruiting Privacy Policy
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT