:

- 6+ years in infrastructure, platform or SRE roles, with at least 4 years running production on Google Cloud.
- Deep Terraform: writing and versioning modules, state management, imports, and safe refactors of live resources.
- GCP networking and security: shared VPC or hub and spoke, private service access and PSC, Cloud NAT, firewall rules, IAM and service account impersonation.
- VPC Service Controls in production: perimeters, access levels, ingress and egress rules, dry-run rollouts.
- Kubernetes on GKE: Workload Identity, private clusters, Helm, and debugging workloads from logs and events.
- GitOps with ArgoCD or Flux, and CI/CD on GitLab or similar.
- Running infrastructure under a compliance regime (HIPAA, SOC2, PCI or similar): encryption with customer-managed keys, audit logging, least privilege.
- Strong debugging from evidence. You check a claim against the live system before acting on it, and you can explain a root cause in a few lines.

Job Responsibilities:

- Landing zone Org: folders, projects and IAM in Terraform. Per-env projects for app, control plane and data plane. Service account impersonation for every apply, no long-lived keys.
- VPC Service Controls: App and DP perimeters per environment, in dry-run and enforced mode. Reading VPC-SC audit logs, telling a real block from expected behaviour, and writing scoped ingress and egress rules. Edge and API Global HTTPS load balancer, Cloud Armor (OWASP CRS tuning, IP allowlists, rate limits) and Apigee proxies with JWT validation, CORS and webhook endpoints.
- Kubernetes: GKE Autopilot with private control planes, Workload Identity, GatewayAPI and per-env namespaces. Debugging pods, rollouts and config drift.
- GitOps and delivery: ArgoCD ApplicationSets and Helm, image promotion between environments, GitLab CI runners.
- Infrastructure as code:



Reusable Terraform modules with pinned versions, Atlantis plan and apply with approval gates, OPA policy checks.
- Data and messaging: AlloyDB over PSC and PSA, Memory store Redis, Pub/Sub event backbone, GCS with signed URLs, Cloud Run jobs.
- Compliance controls: CMEK on every supported resource, mandatory labels, audit log retention, and evidence for HIPAA and SOC 2 reviews.
- Observability: Cloud Logging, Dynatrace, and Wiz. Turning a vague "it is broken" into the exact log line and owner.

Education:

- Bachelor's or Master’s Degree in Computer Science, Computer or Electrical Engineering, Mathematics, or a related field.

GlobalLogic estimates the starting pay range for this role to be performed remotely, and the salary range will be $135,000/yr to $140,000/yr and reflects base salary only. This pay range is provided as a good faith estimate, and the amount offered may be higher or lower. GlobalLogic takes many factors into consideration in making an offer, including candidate qualifications, work experience, operational needs, travel and onsite requirements, internal peer equity, prevailing wage, responsibilities, and other market and business considerations.

What We Offer

Exciting Projects: Come take your place at the forefront of digital transformation! With clients across all industries and sectors, we offer an opportunity to work on market-defining products using the latest technologies.

Collaborative Environment:



You can expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!

Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible work schedules and opportunities to work from home.

Professional Development: We provide continuing education classes, professional certification and training (technical, soft skills, language, and communication skills) to help you realize your professional goals. Being part of a global organization, there are additional learning opportunities through international knowledge exchanges.

Excellent Benefits: We provide our employees with competitive salaries, health and life insurance, short-term and long-term disability insurance, flexible spending accounts, and PTO and holidays.

About GlobalLogic: GlobalLogic is a leader in digital engineering. We help brands across the globe design and build innovative products, platforms, and digital experiences for the contemporary world. By integrating experience design, complex engineering, and data expertise—we help our clients imagine what’s possible, and accelerate their transition into tomorrow’s digital businesses.

Headquartered in Silicon Valley, GlobalLogic operates design studios and engineering centers around the world, extending our deep expertise to customers in the automotive, communications, financial services, healthcare and life sciences, manufacturing, media and entertainment, semiconductor, and technology industries. GlobalLogic is a Hitachi Group Company operating under Hitachi, Ltd. (TSE: 6501) which contributes to a sustainable society with a higher quality of life by driving innovation through data and technology as the Social Innovation Business.

📌 Lead DevOps Engineer (Canada)
🏢 GlobalLogic
📍 Canada