**This is a contract role with a contract duration of 6-12 months at a pay rate of 90-95$/hr 40 hrs a week** <div> <h1>Senior Cloud Engineer (AWS / Terraform / Security & Production Readiness)</h1> <h3>Location: Toronto / Montreal (Hybrid – mandatory)</h3> <h3>Experience: 7–10+ years</h3> <h3>Employment Type: Full-time / Contract</h3> <hr> <h2>Role Overview</h2> We are looking for a Senior Cloud Engineer to lead production readiness, secure cloud deployment, and live cutover of a regulated, high-assurance platform. This role is critical in ensuring that AWS production environments are secure, compliant, and operationally resilient, with a strong focus on infrastructure as code (Terraform), security controls, key management, and production deployment practices. You will work at the intersection of cloud engineering, security, and platform operations, supporting a high-stakes production launch and vendor integrations. <hr> <h2>Key Responsibilities</h2> <h3>1. Production Environment Setup & Governance</h3> <ul> <li style="font-size:14.0pt">Establish and configure AWS production environments (ca-central-1) separated from non-production accounts</li> <li style="font-size:14.0pt">Implement multi-account governance and federation models aligned with enterprise standards</li> <li style="font-size:14.0pt">Apply infrastructure-as-code (Terraform) modules to enforce: <ul> <li style="font-size:14.0pt">Service Control Policies (SCPs)</li> <li style="font-size:14.0pt">Data residency controls</li> <li style="font-size:14.0pt">MFA enforcement and root access restriction</li> <li style="font-size:14.0pt">Public access protections (e.g., S3 hardening)</li> </ul> </li> <li style="font-size:14.0pt">Configure monitoring, alerting, and centralized logging using CloudWatch and log aggregation solutions</li> </ul> <h3>2. Security & Key Management Infrastructure</h3> <ul> <li style="font-size:14.0pt">Implement and manage customer-managed KMS keys, including asymmetric key configurations</li> <li style="font-size:14.0pt">Deploy and maintain secure key custody frameworks, including: <ul> <li style="font-size:14.0pt">Application service keys (rotating)</li> <li style="font-size:14.0pt">Blockchain validator keys</li> <li style="font-size:14.0pt">Privacy/encryption keys for sensitive transaction layers</li> </ul> </li> <li style="font-size:14.0pt">Ensure secure handling of secrets via AWS Secrets Manager with automated rotation</li> </ul> <hr> <h3>3. CI/CD & Production Deployment</h3> <ul> <li style="font-size:14.0pt">Activate and manage production CI/CD pipelines with environment gating and approvals</li> <li style="font-size:14.0pt">Deploy applications and infrastructure using controlled release mechanisms</li> <li style="font-size:14.0pt">Lead production deployments of pre-validated components (from dev & staging) including: <ul> <li style="font-size:14.0pt">Encryption and signing mechanisms</li> <li style="font-size:14.0pt">Security-sensitive platform components</li> </ul> </li> </ul> <hr> <h3>4. Production Readiness & Runbook Validation</h3> <ul> <li style="font-size:14.0pt">Validate and refine production runbooks against real-world system behaviour</li> <li style="font-size:14.0pt">Identify and address gaps between staging and production environments</li> <li style="font-size:14.0pt">Ensure operational readiness, incident response alignment, and monitoring coverage</li> </ul> <hr> <h3>5. Vendor Integration & Cutover</h3> Own the end-to-end integration and production cutover of critical third-party services: <ul> <li style="font-size:14.0pt">KYC systems (e.g., Persona) <ul> <li style="font-size:14.0pt">Transition from mock → sandbox → production</li> </ul> </li> <li style="font-size:14.0pt">Compliance platforms (e.g., sanctions, PEP screening) <ul> <li style="font-size:14.0pt">Ensure secure data flows and operational stability</li> </ul> </li> <li style="font-size:14.0pt">Custody / MPC platforms (multi-party computation) <ul> <li style="font-size:14.0pt">Support secure key ceremonies and production rollout</li> </ul> </li> </ul> <hr> <h3>6. Hypercare & Production Support</h3> <ul> <li style="font-size:14.0pt">Support live production cutover and stabilization phases</li> <li style="font-size:14.0pt">Monitor platform health, performance, and security posture</li> <li style="font-size:14.0pt">Rapidly respond to incidents during hypercare period</li> </ul> <hr> <h2>Required Skills & Experience</h2> <ul> <li style="font-size:14.0pt">7+ years in cloud engineering / platform engineering roles</li> <li style="font-size:14.0pt">Strong hands-on experience with AWS (multi-account environments)</li> <li style="font-size:14.0pt">Deep expertise in Terraform (modular design, IaC best practices)</li> <li style="font-size:14.0pt">Proven experience implementing: <ul> <li style="font-size:14.0pt">Cloud security frameworks (IAM, SCPs, KMS, Secrets Manager)</li> <li style="font-size:14.0pt">Monitoring & observability (CloudWatch, logging pipelines)</li> </ul> </li> <li style="font-size:14.0pt">Experience with CI/CD pipelines and controlled production deployments</li> <li style="font-size:14.0pt">Strong understanding of: <ul> <li style="font-size:14.0pt">Production readiness and release management</li> <li style="font-size:14.0pt">Secure architecture and data protection controls</li> </ul> </li> <li style="font-size:14.0pt">Experience supporting high-risk production cutovers or regulated environments</li> </ul> <hr> <h2>Nice to Have</h2> <ul> <li style="font-size:14.0pt">Experience with blockchain or cryptographic key management systems</li> <li style="font-size:14.0pt">Exposure to MPC (multi-party computation) or custody platforms</li> <li style="font-size:14.0pt">Familiarity with compliance/KYC integrations</li> <li style="font-size:14.0pt">AWS certifications (Solutions Architect / DevOps / Security)</li> </ul> <hr> <h2>What You Bring</h2> <ul> <li style="font-size:14.0pt">Ownership mindset with ability to lead production-critical initiatives</li> <li style="font-size:14.0pt">Strong problem-solving skills in high-pressure environments</li> <li style="font-size:14.0pt">Ability to work across engineering, security, and vendor teams</li> <li style="font-size:14.0pt">Clear communication and documentation skills</li> </ul> </div>

Senior Cloud Engineer (Toronto, ON, CA, M5J 2P1) @ GFT Technologies SE - Job Offerings

About this role

Ready to apply?