Senior Cloud DevOps Engineer

Qfin; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Benefits plan

RRSP matching

Paid time off

Modern equipment

Job summary

Qfin is seeking a Senior Cloud DevOps (SRE) Engineer to design, implement, operate, and improve our AWS-based cloud infrastructure and DevOps capabilities. This hands-on role emphasizes production reliability, security-aware CI/CD, and collaboration with cross-functional teams to keep platforms secure, scalable, and compliant.

The ideal candidate will drive infrastructure as code, incident response, and release management across multiple environments, with a strong emphasis on privacy and

Qualifications

• 7+ years of professional experience in DevOps, Cloud Engineering, SRE, or related discipline.
• Strong hands-on experience with AWS, including production environments and cloud architecture design.
• Strong understanding of AWS services such as IAM, VPC, ECS, RDS/MySQL, S3, CloudWatch, CloudTrail, KMS, Secrets Manager, Load Balancing, Route 53.
• Experience building security checks into CI/CD pipelines (shift-left security / DevSecOps), including SAST, DAST, and software composition analysis
• Experience with infrastructure automation / IaC, such as Terraform.
• Strong understanding of cloud security, IAM, encryption, network security, logging.
• Experience supporting production deployments and release management, including controlled release approvals for code delivered by distributed development teams.
• Understanding of privacy, data protection, security controls, and regulatory compliance
• Familiarity with OSFI B-10 and B-13 or equivalent financial-sector technology, third-party risk, cybersecurity, and operational resilience requirements.

Responsibilities

• Design, implement, and maintain secure and highly available AWS cloud infrastructure.
• Manage AWS production environments across networking, compute, storage, databases, IAM, logging, monitoring, and security services.
• Apply AWS Well-Architected Framework principles across Security, Reliability, Performance Efficiency, Cost Optimization, and Operational Excellence.
• Implement infrastructure using Infrastructure as Code (IaC) and maintain consistent environments across development, testing, and production.
• Support highly available and resilient architectures, including Multi-AZ deployments, backup, disaster recovery, and business continuity.
• Design, build, and maintain enterprise-grade CI/CD pipelines for application and infrastructure deployment.
• Automate build, test, security scanning, deployment, rollback, and release processes.
• Establish controlled promotion processes across UAT to Production with approval gates and separation of duties.
• Manage source-code repositories, branching strategies, artifact repositories, deployment automation, and release management.
• Own the organization’s source-code repositories, CI/CD pipelines, release process, and production environment. Review code changes from internal and external development teams and ensure only approved changes reach production.
• Take ownership of AWS production environments and ensure their availability, reliability, and operational health.
• Troubleshoot production incidents involving applications, infrastructure, networking, databases, deployments, performance, and integrations.
• Monitor system health, application performance, infrastructure metrics, logs, alerts, and operational events.
• Participate in incident response, escalation, remediation, and post-incident reviews.
• Implement security controls across network, compute, storage, databases, APIs, and CI/CD pipelines.
• Integrate security scanning and vulnerability management into the software delivery lifecycle, following shift-left security principles.

Skills

AWS

SRE

CI/CD

Security

Cloud Architecture

Tools

Terraform

SAST

DAST

IAST

Job description

We are looking for a Senior Cloud DevOps (SRE) Engineer to design, implement, operate, and continuously improve our cloud infrastructure and DevOps capabilities on AWS.

This is a hands-on senior engineering role with significant responsibility for production environments, CI/CD, cloud security, deployment, monitoring, troubleshooting, and operational reliability. The successful candidate will work closely with application, data, security, and technology teams to ensure that our platforms are secure, scalable, highly available, and compliant with applicable privacy and regulatory requirements.

The ideal candidate has strong practical experience with AWS and cloud-native DevOps, understands how to operate production systems in a regulated environment, and is comfortable troubleshooting complex infrastructure and application issues. The candidate will also help build a security-first delivery process, where security checks are built into the CI/CD pipeline from the start (shift-left security). The candidate will control how code from our development teams is reviewed, released, and deployed to production.

Key Responsibilities

• Design, implement, and maintain secure and highly available AWS cloud infrastructure.
• Manage AWS production environments across networking, compute, storage, databases, IAM, logging, monitoring, and security services.
• Apply AWS Well-Architected Framework principles across Security, Reliability, Performance Efficiency, Cost Optimization, and Operational Excellence.
• Implement infrastructure using Infrastructure as Code (IaC) and maintain consistent environments across development, testing, and production.
• Support highly available and resilient architectures, including Multi-AZ deployments, backup, disaster recovery, and business continuity.

2. CI/CD & DevOps

• Design, build, and maintain enterprise-grade CI/CD pipelines for application and infrastructure deployment.
• Automate build, test, security scanning, deployment, rollback, and release processes.
• Establish controlled promotion processes across UAT to Production with approval gates and separation of duties.
• Manage source-code repositories, branching strategies, artifact repositories, deployment automation, and release management.
• Own the organization’s source-code repositories, CI/CD pipelines, release process, and production environment. Review code changes from internal and external development teams and make sure that only approved changes reach production.

3. Production Operations & Troubleshooting

• Take ownership of AWS production environments and ensure their availability, reliability, and operational health.
• Troubleshoot production incidents involving applications, infrastructure, networking, databases, deployments, performance, and integrations.
• Monitor system health, application performance, infrastructure metrics, logs, alerts, and operational events.
• Participate in incident response, escalation, remediation, and post-incident reviews.

4. Cloud Security & IAM

• Implement security controls across network, compute, storage, databases, APIs, and CI/CD pipelines.
• Integrate security scanning and vulnerability management into the software delivery lifecycle, following shift-left security principles so that problems are found early.
• Work with development teams and independent third-party vendors on application security testing, including penetration testing, static (SAST), dynamic (DAST), and interactive (IAST) testing, and track the fixing of findings.

5. Privacy, Compliance & Regulatory Requirements

• Ensure cloud infrastructure and DevOps practices comply with applicable privacy, security, data residency, and regulatory requirements.
• Understand the implications of handling PII and sensitive financial/customer data in cloud environments.
• Implement appropriate controls for data protection, encryption, access control, logging, retention, and data transfer.
• Understand and apply relevant OSFI B-10 and B-13 expectations in cloud, technology, third-party/vendor management, cybersecurity, and operational resilience.

6. Application & Data Platform Support

• The candidate should have sufficient technical knowledge to troubleshoot and support applications and data platforms, including some experience with: Java / Spring Boot, Vue.js, MySQL, Apache SeaTunnel, Apache Doris, DolphinScheduler, Apache Superset

Required Qualifications

• 7+ years of professional experience in DevOps, Cloud Engineering, Site Reliability Engineering, Infrastructure Engineering, or a closely related discipline.
• Strong hands-on experience with AWS, including production environments and cloud architecture design.
• Strong understanding of AWS services such as: IAM, VPC, ECS, RDS/MySQL, S3, CloudWatch, CloudTrail, KMS, Secrets Manager, Load Balancing, Route 53, etc.
• Experience building security checks into CI/CD pipelines (shift-left security / DevSecOps), including SAST, DAST, and software composition analysis
• Experience with infrastructure automation / Infrastructure as Code, such as Terraform.
• Strong understanding of cloud security, IAM, encryption, network security, application security, vulnerability management, and logging.
• Experience supporting production deployments and release management, including controlled release approvals for code delivered by distributed development teams.
• Understanding of privacy, data protection, security controls, and regulatory compliance.
• Familiarity with OSFI B-10 and B-13 or equivalent financial-sector technology, third-party risk, cybersecurity, and operational resilience requirements.
• Ability to work effectively with application developers, data engineers, security teams, architects, and business stakeholders.

Preferred Qualifications

• AWS certification such as AWS Solutions Architect, AWS DevOps Engineer, or AWS Security Specialty.
• Experience in FinTech, banking, lending, payments, or other regulated financial services.
• Experience with Terraform or other IaC frameworks.
• Experience with IAST, fuzz testing, and coordinating independent third-party penetration tests.
• Experience with centralized logging, observability, SIEM, and security monitoring.
• Experience with disaster recovery, high availability, backup, and operational resilience.
• Experience with Java/Spring Boot production environments.
• Experience supporting modern data platforms involving SeaTunnel, Doris, DolphinScheduler, and Superset.
• Experience working with distributed engineering teams across multiple countries or time zones.

What We Offer / Perks & Benefits

• Comprehensive Benefits Plan: Extended health, dental, vision, and paramedical coverage.
• RRSP Matching Program: Group RRSP with generous company matching to help you invest in your future.
• Paid Time Off: 15 days of paid annual vacation, plus paid personal/wellness days and statutory holidays.
• Modern Equipment: Top-of-the-line developer hardware (MacBook Pro, multi-monitor setup) provided.

Workplace & Culture

• Hybrid Work Model: 3 days in-office / 2 days remote per week in our North York office.
• Vibrant & Energetic Team: Join a young, fast-paced, and dynamic team where high ownership and flat hierarchy are valued.