Senior DevOps & Compliance Engineer

Senior DevOps & Compliance Engineer (Remote - Canada)

Location: Remote (Canada)

Engagement Type: B2B contractor

Company: Revenue Roll Inc. — US-based SaaS company building secure, high-scale data infrastructure for digital commerce.

About the Role

We’re consolidating multiple DevOps vendors into one high-impact in-house role. You’ll be responsible for building and operating a multi-cloud (AWS + GCP) infrastructure, driving observability and CI/CD governance, and owning our SOC 2 compliance automation.

This is a senior, hands-on position for someone who can combine infrastructure engineering, security, and automation — and enjoys owning systems end-to-end.

You’ll collaborate directly with our CTO and US engineering team (UTC-5 to UTC+2 overlap).

Responsibilities

Infrastructure & Automation

• Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.
• Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.
• Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.
• Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).

Observability & Monitoring

• Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing.
• Configure Slack-based alerting segmented by environment (dev, staging, prod).
• Maintain health and cost dashboards across AWS, GCP, and data platform services.

CI/CD Governance

• Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).
• Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.
• Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).

Security & Secret Management

• Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.
• Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.
• Configure Lambda/GCS malware scanning for file storage.

SOC 2 Compliance Automation

• Automate control evidence collection (logs, screenshots, IAM diffs).
• Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.
• Maintain structured audit folders (GCS/S3, Jira, Confluence).
• Support quarterly access reviews and rotation monitoring.

Skills & Experience

Must-Have:

• 5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.
• Proven background in AWS and GCP operations, ideally multi-cloud.
• Proficient with Terraform, GitHub Actions, and IaC security best practices.
• Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).
• Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.
• Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.
• Strong English communication (written and spoken).

Nice-to-Have:

• Experience with Prometheus/Grafana dashboards.
• Prior work with 1Password CLI, Auth0, or Salesbricks.
• Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling.

What You’ll Deliver in the First 90 Days

• Migrate GKE → EKS workloads and automate environment provisioning via Terraform.
• Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).
• Implement CI/CD enforcement (coverage, schema validation, secrets scanning).
• Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).

Work Setup

Full remote, flexible hours (overlap with US East Coast 3–4 hours/day).

Direct collaboration with CTO and engineering leads.

Asynchronous-first communication via Slack, GitHub, Notion, and Jira.

Why Join Tie

We’re building a modern data & identity infrastructure powering eCommerce personalization.

You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.

You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.