Senior DevOps & Compliance Engineer

Senior DevOps & Compliance Engineer (Remote - Canada)

Location: Remote (Canada)

Engagement Type: B2B contractor

Company: Revenue Roll Inc. — US-based SaaS company building secure, high-scale data infrastructure for digital commerce.

About the Role

We’re consolidating multiple DevOps vendors into one high-impact in-house role. You’ll be responsible for building and operating a multi-cloud (AWS + GCP) infrastructure, driving observability and CI/CD governance, and owning our SOC 2 compliance automation.

This is a senior, hands-on position for someone who can combine infrastructure engineering, security, and automation — and enjoys owning systems end-to-end.

You’ll collaborate directly with our CTO and US engineering team (UTC-5 to UTC+2 overlap).

Responsibilities

Infrastructure & Automation

Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.

Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.

Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.

Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).

Observability & Monitoring

Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing.

Configure Slack-based alerting segmented by environment (dev, staging, prod).

Maintain health and cost dashboards across AWS, GCP, and data platform services.

CI/CD Governance

Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).

Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.

Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).

Security & Secret Management

Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.

Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.

Configure Lambda/GCS malware scanning for file storage.

SOC 2 Compliance Automation

Automate control evidence collection (logs, screenshots, IAM diffs).

Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.

Maintain structured audit folders (GCS/S3, Jira, Confluence).

Support quarterly access reviews and rotation monitoring.

Skills & Experience

Must-Have:

5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.

Proven background in AWS and GCP operations, ideally multi-cloud.

Proficient with Terraform, GitHub Actions, and IaC security best practices.

Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).

Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.

Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.

Strong English communication (written and spoken).

Nice-to-Have:

Experience with Prometheus/Grafana dashboards.

Prior work with 1Password CLI, Auth0, or Salesbricks.

Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling.

What You’ll Deliver in the First 90 Days

Migrate GKE → EKS workloads and automate environment provisioning via Terraform.

Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).

Implement CI/CD enforcement (coverage, schema validation, secrets scanning).

Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).

Work Setup

Full remote, flexible hours (overlap with US East Coast 3–4 hours/day).

Direct collaboration with CTO and engineering leads.

Asynchronous-first communication via Slack, GitHub, Notion, and Jira.

Why Join Tie

We’re building a modern data & identity infrastructure powering eCommerce personalization.

You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.

You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.

How to Apply

Send your CV / GitHub profile and a short note describing:

A project where you implemented observability or SOC 2 automation.

Your favorite IaC or monitoring tool and why.

Interview process: Initial call with CTO (30 min) → Technical deep dive → Offer

Summary (For Recruiter Use)

Category

Details

Level