Senior Software Engineer, DevOps & Security

GuruLink; Vancouver; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Downtown Vancouver office

Job summary

GuruLink is seeking a hybrid DevOps/SRE leader in Vancouver to own scalable infrastructure, IaC, CI/CD, and observability. You’ll shape an AI-first engineering org and drive secure, cost-efficient platforms.

You’ll manage Pulumi-based IaC, GKE operations, and policy-driven CI/CD pipelines across teams, with a focus on reducing toil and improving system reliability.

Qualifications

• Production systems ownership with on-call responsibility.
• Strong Kubernetes knowledge and operational discipline.
• Infrastructure as code using Pulumi or Terraform.
• Solid fundamentals in GCP or AWS.
• Background in systems engineering and software development.
• CI/CD owned as a product; familiarity with common CI tools.
• Security tooling integrated into engineering practices.
• SOC 2 or enterprise security/compliance experience a plus.
• Ability to scope vague problems and ship incrementally.
• Familiarity with AI coding tools and AI-first teams.

Responsibilities

• Build and extend a Pulumi component library to standardize infra by default.
• Treat GKE as a product: manage upgrades, in-cluster services, sizing, and policy enforcement.
• Own core CI/CD building blocks and reduce pipeline friction across teams.
• Improve internal developer platform surfaces for visibility into systems.
• Own observability health with actionable alerts and reduced on-call noise.
• Drive cost reductions on GCP and LLM usage through right-sizing and planning.
• Extend supply chain controls and implement automated, evidential SOC 2 controls.

Skills

DevOps mindset

On-call ownership

Kubernetes expertise

Infrastructure as code

Security tooling

Cost optimization

Observability

Ambiguity ownership

AI tooling familiarity

Tools

Pulumi

Terraform

Kubernetes

GitHub Actions

Buildkite

Job description

Location: Vancouver, British Columbia

This role suits someone systems-minded, pragmatic, security-aware, and averse to repetitive manual work. You'll step in when the platform is on fire, but your focus is prevention over reaction.

You’ll own real infrastructure at real scale, with authority over the IaC, GKE, and CI/CD architecture every team depends on, and you’ll help shape how an AI-first engineering org ships software safely.

This is a Hybrid role:

• 3 days a week
• Office located downtown Vancouver

What You’ll Do:

• Build and extend a Pulumi component library so teams get correct, disaster-recovery-ready infrastructure by default instead of hand-rolling stacks across multiple GCP environments.
• Run GKE as a product, handling cluster and node pool upgrades, in-cluster services, workload right-sizing, and policy enforcement.
• Own the core building blocks of CI/CD workflows, cut CI time and flake rate fleet-wide, and standardize the golden path for shipping services so pipelines stay out of engineers' way.
• Improve the internal developer platform surfaces that show engineers what's happening under the hood in their own systems.
• Own the health of the observability stack, with consistent instrumentation, actionable alerts, and less on-call noise, so production stays easy to understand.
• Drive GCP and LLM cost reduction through attribution, right-sizing, commitment planning, and removal of orphaned resources.
• Extend software supply chain controls, own infrastructure identity and access, and build SOC 2 and other compliance requirements into automated, evidenced controls so the secure path is also the fast path and audits are a byproduct of how the team builds.

Tech Stack:

GCP, Kubernetes, Pulumi (IaC), Postgres, Temporal

Must Have Skills:

• Deep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering, operating production systems that paying customers depend on, including on-call ownership.
• Deep, practical Kubernetes knowledge.
• Infrastructure as code treated as software (Pulumi or Terraform).
• Strong GCP or AWS fundamentals.
• Background in systems engineering and writing software.
• CI/CD owned as a product: you’ve built and maintained pipelines used by other teams. GitHub Actions or Buildkite preferred; GitLab CI or CircleCI experience transfers.
• Hands-on experience with security tooling as an engineering practice.
• Compliance engineering for SOC 2 or enterprise partner security programs, implemented as automated controls; threat modeling and related practices.
• Ownership under ambiguity: you scope a vague problem, ship it incrementally, and tell people clearly what changed and why.
• Fluency with AI coding tools and experience working on AI-first teams.

Nice to Have Skills:

• Ownership of platform migrations and decommissions.
• Built an internal developer platform or self-service tooling that other engineers adopted.
• Comfort with LLM infrastructure (gateways, token cost attribution, rate limiting, provider failover)