Cloud Migration Architect/Engineer

Posted 10 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • GCP Cloud Migration Engineer managing complex lift-and-shift cloud migrations from legacy systems. Collaborating with global teams to utilize modern GCP-native infrastructure strategies.

Responsibilities

  • Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies.
  • Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime.
  • Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines.
  • Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication.
  • Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks.
  • Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites.
  • Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.

Requirements

  • Proven track record of working in complex, undocumented brownfield environments.
  • Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets.
  • Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises.
  • Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management.
  • Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration.
  • Advanced, hands-on Terraform experience (zero click-ops environment).
  • Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed).
  • Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks.
  • Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads.
  • Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines.

Benefits

  • Offers Bonus

Job type

Full Time

Experience level

Mid levelSenior

Salary

CA$125,000 - CA$135,000 per year

Degree requirement

Postgraduate Degree

Tech skills

CloudDNSGoogle Cloud PlatformLinuxTerraform

Location requirements

RemoteCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.