Cloud Migration Architect/Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TELUS Digital

WebsiteLinkedInAll Job Openings

201 - 500 employees

🤝 B2B

🤖 Artificial Intelligence

☁️ SaaS

B2B • Artificial Intelligence • SaaS

TELUS Digital is an award-winning digital consultancy that combines human-centered design, software engineering, data science and generative AI to create AI‑fueled digital experiences and platforms for global brands. The company provides services in experience strategy, UX research and design, engineering and architecture, data science and engineering, digital marketing, and product/project delivery, and operates Fuel iX™, an enterprise-focused generative AI engine to help businesses move AI initiatives into production. TELUS Digital emphasizes a collaborative culture, global hiring, and accessibility in its hiring practices.

📋 Description

• Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies. • Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime. • Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines. • Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication. • Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks. • Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites. • Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.

🎯 Requirements

• Proven track record of working in complex, undocumented brownfield environments. • Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets. • Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises. • Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management. • Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration. • Advanced, hands-on Terraform experience (zero click-ops environment). • Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed). • Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks. • Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads. • Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines.

🏖️ Benefits

• Offers Bonus