Team Lead, Cloud Business Office (CBO) (Montreal)

Overview

The Cloud Business Office is seeking a security-focused Team Lead to operate, secure, and continuously improve our Azure and Google Cloud Platform (GCP) landscape through implementing robust operational process, hands‑on coding, and delivery leadership.

Responsibilities

• Process Excellence & Operations: Design, implement, and run robust cloud operating processes: on‑call rotations, incident & problem management, change management (normal/standard/emergency), release gating, production readiness reviews, and blameless post‑mortems with actionable follow‑ups. Establish runbooks, OLAs/SLOs, RACIs, ADRs, and quality gates for platform changes; ensure SOX compliance. Maintain a service catalog.
• Site Reliability Engineering & Automation: Define and track SLIs/SLOs and error budgets for key services; drive MTTR reduction and change failure rate improvements. Standardize Infrastructure as Code (Terraform modules), policy‑as‑code, and CI/CD pipelines with drift detection and auto‑remediation. Build reusable automation for landing zones, networks, and AKS/GKE; enforce Zero Trust IAM hygiene.
• Security & Compliance: Own cloud security posture (CSPM), SIEM/SOAR integration, vulnerability management, and secrets/key management. Implement secure‑by‑default guardrails and continuous compliance checks.
• Hands‑on Engineering: Write and review code: Terraform (mandatory), Go/PowerShell for automation, pipelines, policy tests. Build auto‑remediation functions, CLI tools, integrations; instrument telemetry and dashboards. Enforce secure SDLC practices.
• Delivery Leadership: Serve as technical lead for projects by contributing to reference architectures and controls. Orchestrate cross‑functional delivery, remove impediments, and keep outcomes front‑and‑center.
• FinOps: Implement tagging standards, showback/chargeback, budgets/alerts, rightsizing, and commitment optimization. Operate rolling forecasts and transparent unit economics.
• Culture & Enablement: Coach team members, lead inclusive decision forums, publish training, playbooks, and templates. Increase adoption and reduce variance across teams.

Required Skills and Qualifications

• 7+ years operating production Azure and GCP services; 3+ years in cloud security with demonstrated scale.
• Experience with a variety of cloud architectures (web/database, API/Microservices, K8s, big data, AI platforms, etc).
• Deep automation experience with Terraform and CI/CD; scripting in PowerShell/Go.
• SRE proficiency: SLIs/SLOs, error budgets, incident/postmortem practices, observability.
• Security depth: IAM, KMS/Key Vault/Secret Manager, network segmentation, CSPM/SIEM, vulnerability management.
• Proven process design & execution: on‑call, incident/problem/change management, production readiness, audit evidence, runbook quality.
• Demonstrated ability to code and deliver: building automation/pipelines, testing and scanning, deploying secure changes, and leading releases end‑to‑end.
• Strong leadership, facilitation, communication, stakeholder management; documentation of ADRs, guardrails, playbooks.

Preferred

• Manufacturing/OT/IoT exposure; secure connectivity and segmentation patterns; integration with enterprise SaaS using SSO/SCIM.
• Certifications: CCSK, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CISSP/CCSP, CKA/CKS.

Diversity & Inclusion

ACKNOWLEDGING THE POWER OF DIVERSITY BRP is dedicated to nurturing a culture that invites, connects, and propels the ambitions of people of all backgrounds, profiles, beliefs and experiences. Ultimately, the diversity and uniqueness of our people fuel our ingenuity and set the course for the path ahead!

Benefits

Annual bonus based on the company’s financial results. Generous paid time away. Pension plan. Collective saving opportunities. Industry leading healthcare fully paid by BRP.

Flexible work schedule. A summer schedule that varies by department and location. Holiday season shutdown. Educational resources. Discount on BRP products.