Overview

The Cloud Business Office is seeking a security-focused Team Lead to operate, secure, and continuously improve our Azure and Google Cloud Platform (GCP) landscape through implementing strong operational processes, hands-on coding, and delivery leadership. You will own day-to-day operations; help to set standards and guardrails; and lead projects end-to-end with an automation-first mindset. As a technical leader, you'll coach team members and drive context-appropriate and fit-for-purpose cloud outcomes.

Responsibilities

- Process Excellence & Operations
- Design, implement, and run robust cloud operating processes: on-call rotations, incident & problem management, change management (normal/standard/emergency), release gating, production readiness reviews, and blameless postmortems with actionable follow-ups.
- Establish runbooks, OLAs/SLOs, RACIs, ADRs, and quality gates for platform changes; ensure SOX compliance.
- Maintain a service catalog.

- Site Reliability Engineering & Automation

- Define and track SLIs/SLOs and error budgets for key services; drive MTTR reduction and change failure rate improvements.
- Standardize Infrastructure as Code (Terraform modules), policy-as-code (Azure Policy, GCP Org Policies, OPA/Gatekeeper), and CI/CD pipelines (GitHub Actions/Azure DevOps/Cloud Build) with drift detection and auto-remediation.
- Build reusable automation for landing zones, networks, and AKS/GKE; enforce Zero Trust IAM hygiene (least privilege, PIM/PAM, workload identities).

- Security & Compliance

- Own cloud security posture (CSPM), SIEM/SOAR integration, vulnerability management, and secrets/key management (Key Vault / Secret Manager / KMS).




- Implement secure-by-default guardrails and continuous compliance checks.

- Hands-on Engineering

- Write and review code: Terraform (mandatory), Go/PowerShell for automation, pipelines, policy tests.
- Build auto-remediation functions, CLI tools, and integrations (SSO/SCIM; tagging/FinOps APIs); instrument telemetry (logs/metrics/traces) and dashboards.
- Enforce secure SDLC practices: code reviews, unit/integration tests, IaC/security scanning, secrets hygiene, and Git workflows.

- Delivery Leadership

- Serve as technical lead for projects by contributing to reference architectures, controls, and paved paths.
- Orchestrate cross-functional delivery (security, platform, network, data, app teams; vendors), remove impediments, and keep outcomes front-and-center.

- FinOps

- Implement tagging standards, showback/chargeback, budgets/alerts, rightsizing, and commitment optimization (Reservations/Savings Plans/CUDs).
- Operate rolling forecasts and transparent unit economics; apply FinOps principles to empower teams within global guardrails.

- Culture & Enablement

- Coach team members in automation and secure patterns; lead inclusive decision forums (ops reviews, risk/cost councils) with documented outputs.
- Publish training, playbooks,



and templates; increase adoption of paved paths and reduce variance across product teams.

Required

- 7+ years operating production Azure and GCP services; 3+ years in cloud security with demonstrated scale.
- Experience with a variety of cloud architectures (web/database, API/Microservices, k8s, big data, AI platforms, etc).
- Deep automation experience with Terraform (module design, environments, state, testing) and CI/CD (GitHub Actions/Azure DevOps/Bitbucket); scripting in PowerShell/Go.
- SRE proficiency: SLIs/SLOs, error budgets, incident/postmortem practices, observability (Azure Monitor/Log Analytics, Cloud Logging/Monitoring, Prometheus/Grafana, OpenTelemetry).
- Security depth: IAM (Entra ID/Google Cloud IAM, PIM/PAM, workload identity), KMS/Key Vault/Secret Manager, network segmentation (hub-and-spoke, Private Link/Service Connect), CSPM/SIEM, vulnerability management.
- Proven process design & execution: on-call, incident/problem/change management, production readiness, audit evidence, and runbook quality.
- Demonstrated ability to code and deliver: building automation/pipelines, testing and scanning, deploying secure changes, and leading releases end-to-end.
- Robust leadership, facilitation, communication, and stakeholder management; habit of documenting ADRs, guardrails, and playbooks.

Preferred

- Manufacturing/OT/IoT exposure; secure connectivity and segmentation patterns; integration experience with enterprise SaaS (SAP, ServiceNow, Salesforce) using SSO/SCIM.
- Certifications: CCSK, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CISSP/CCSP, CKA/CKS.

📌 Team Lead, Cloud Business Office (Montreal)
🏢 BRP
📍 Montreal