Senior DevOps Engineer (Azure Infrastructure & Platform)

Randstad Digital; Toronto; Hybrid; CAD 120,000 - 130,000; Full time

Job summary

Randstad Digital is hiring a Senior DevOps Engineer to lead cloud infrastructure and platform engineering across Azure and AWS. You will own end-to-end provisioning, secure network design, and containerized platforms, with emphasis on Azure networking and Terraform IaC.

Ideal candidates have 7+ years in DevOps, strong Azure AKS skills, and experience in regulated banking environments. Hybrid work from Downtown Toronto with competitive CAD base compensation is offered.

Qualifications

• 7+ years of hands-on DevOps, cloud platform, or infrastructure engineering.
• Deep Azure networking experience with hub-and-spoke designs.
• Strong IaC experience using Terraform.
• Containerization with Docker and Kubernetes (AKS).
• Scripting in Bash, PowerShell, or Python.
• Experience in regulated financial environments (e.g., OSFI, PCI-DSS, zero-trust).

Responsibilities

• Own cloud infrastructure provisioning and scaling across Azure (primary) and AWS.
• Design and implement end-to-end Azure network architecture (Hub-and-Spoke, NSGs, Private Link).
• Package microservices with Docker and manage workloads on Kubernetes (AKS).
• Embed security and compliance across SDLC with Snyk, SonarQube, Nexus, Vault.
• Build and optimize CI/CD pipelines with GitHub Actions and Azure DevOps.
• Monitor and respond to incidents with Azure Monitor and CloudWatch to maintain 99.9%+ availability.

Job description

We are hiring a Senior DevOps Engineer to join a fast-growing, CDIC-insured, federally regulated Canadian digital bank undergoing an active technology transformation.

Unlike typical DevOps positions focused solely on writing CI/CD pipelines, this is a true Cloud Infrastructure & Platform Engineering role. You will report directly to the Lead Cloud Engineer and take end-to-end ownership of how cloud infrastructure, secure network architecture, and containerized platforms are architected, provisioned, and scaled across Azure (primary) and AWS.

If you are a hands-on engineer who thrives in high-ownership environments, understands deep Azure networking (beyond basic Terraform modules), and wants your work to carry real regulatory weight, this is the role for you.

Why Join This Team?

• Real Scope & Ownership: Work in a tight-knit, high-impact engineering team in Downtown Toronto where your voice matters—no silos or rigid bureaucracy.
• Active Tech Transformation: Build brand-new digital banking and lending infrastructure from the ground up, not just maintaining legacy systems.
• High Career Value: Gain deep, portable experience in a heavily regulated banking environment with continuous investment in modern cloud tooling.

Core Responsibilities

• Cloud Infrastructure via IaC: Provision and manage scalable production environments in Azure (and secondary AWS workloads) using modular Terraform as your primary tool.
• End-to-End Azure Network Architecture: Design and optimize secure Hub-and-Spoke VNets, subnets, NSGs, Azure Firewalls, Application Gateways (WAF), Front Door, Private Endpoints, and Private Link.
• Containerization & Orchestration: Package microservices with Docker and manage container workloads on Kubernetes (AKS).
• SDLC & DevSecOps Integration: Embed security and compliance controls across the entire software development lifecycle, integrating code scanning (Snyk, SonarQube), artifact management (Nexus), and secrets rotation (Vault).
• Automated Pipelines: Build and optimize CI/CD pipelines using GitHub Actions and Azure DevOps.
• Proactive Monitoring & Incident Response: Implement robust logging, alerting, and telemetry using Azure Monitor and CloudWatch to maintain 99.9%+ platform availability.

What We Are Looking For

• 7+ years of hands-on experience in DevOps, Cloud Platform, or Infrastructure Engineering (flexible down to 5–6 years for exceptional Azure depth).
• Deep Azure Networking Expertise: Proven track record designing hub-and-spoke networks, firewall placement, routing tables, and Private Link security controls.
• Strong Infrastructure as Code (IaC): Production experience writing, structuring, and managing state in Terraform.
• Containerization & Kubernetes: Solid hands-on experience with Docker and managed Kubernetes (AKS).
• Scripting Proficiency: Advanced scripting abilities in Bash, PowerShell, or Python.
• Regulated Environment Experience: Familiarity with financial compliance, OSFI, PCI-DSS, or zero-trust security frameworks.
• Collaborative Mindset: A vocal engineer who participates actively in architectural discussions, challenges technical proposals constructively, and thrives in daily standups.

Nice-to-Haves

• Certifications: Azure DevOps Engineer Expert, HashiCorp Terraform Associate, or CKA/CKAD.
• Secondary exposure to AWS infrastructure or database migrations.
• Hands‑on experience with Zero Trust / SASE network architectures or Okta integrations.

Work Model & Location: hybrid schedule - 3 days on-site in Downtown Toronto (Thursday mandatory, remaining 2 days flexible) / 2 days remote

Role Type: Permanent, Full-Time

Compensation: Up to $120,000 – $130,000 CAD Base