Lead DevSecOps Engineer (Remote, Montreal, QC, Canada)

Montreal 30 days agoFull-time External
Negotiable
This job posting has expired and is no longer accepting applications.
Requirements: • 7+ years of hands-on DevOps/Infrastructure engineering experience with AWS • Proven track record of redesigning and scaling production infrastructure for high-growth companies • Deep expertise in AWS services including RDS, EC2, ELB/ALB, Route53, VPC, IAM, and CloudFormation/Terraform • Strong security background with experience in infrastructure hardening and compliance • Experience migrating from traditional deployments to modern container orchestration (Kubernetes/ECS) • Proficiency in infrastructure-as-code tools (Terraform preferred) • Expert-level scripting skills in Python, Go, or Bash • Experience with GitLab CI/CD pipelines and GitLab-based workflows • Kubernetes expertise for container orchestration at scale • Experience with monitoring/observability tools (Prometheus, Grafana, DataDog, ELK stack) • Advanced GitLab experience including GitOps practices, GitLab Runner optimization, and GitLab security scanning • Knowledge of serverless architectures and event-driven systems • Experience with compliance frameworks (SOC2, ISO 27001, etc.) • Previous experience supporting AI/ML workloads and data pipelines Responsibilities: • Critically evaluate our existing AWS infrastructure setup including RDS configurations, EC2 instances, Nginx load balancing, Docker Compose deployments, Target Groups, and Route53 DNS management • Identify security vulnerabilities and scalability bottlenecks in the current architecture • Design and implement infrastructure improvements with a focus on high availability, disaster recovery, and auto-scaling capabilities • Modernize deployment strategies moving from Docker Compose to more scalable orchestration solutions where appropriate • Conduct security audits of existing infrastructure and implement security hardening measures • Redesign network architecture with proper VPC segmentation, security groups, and IAM policies • Implement secrets management and encryption at rest/in transit across all services • Establish compliance frameworks suitable for enterprise clients in manufacturing and aerospace sectors • Architect auto-scaling solutions to handle variable workloads and traffic spikes • Optimize database performance and implement proper backup/recovery strategies for RDS • Design load balancing strategies that can handle global traffic distribution • Implement caching layers and CDN strategies for improved performance • Take full ownership of infrastructure decisions and their implementation • Drive initiatives from conception to completion with minimal supervision • Establish infrastructure standards and best practices across the engineering organization • Lead incident response and post-mortem analysis for infrastructure-related issues