DevOps Engineer (Toronto)

We are looking for a hands‑on DevOps Engineer to help operate and evolve the platforms that power secure, reliable pension services across cloud, Kubernetes, CI/CD, secrets management, observability, and automation.

In this role you will work with developers, architects, security, data, and operations teams to improve how services are deployed, monitored, backed up, upgraded, and recovered across multiple cloud and platform environments.

Responsibilities

• Design, implement, and maintain Kubernetes and cloud platform capabilities on GKE/GCP across application and shared platform environments.
• Build and improve GitLab CI/CD pipelines for infrastructure, application delivery, testing, security scanning, and controlled promotion between environments.
• Develop and maintain Terraform modules, environment configuration, and automated workflows that reduce manual operational effort.
• Operate HashiCorp Vault integrations for applications and pipelines, including secret access patterns, auth methods, policies, and namespace‑aware usage.
• Improve observability with Datadog dashboards, service‑level monitors, actionable alerts, and log/metric correlation for faster incident response.
• Support GKE upgrades, maintenance windows, rollout sequencing, workload validation, backup checks, and rollback planning.
• Partner with application teams to onboard services, troubleshoot deployments, tune resource requests/limits, and improve reliability.
• Participate in incident response, root‑cause analysis, production readiness reviews, and post‑incident corrective action tracking.
• Create and maintain operational documentation, runbooks, architecture notes, and automation examples that help the team scale.

Qualifications

• 3+ years of DevOps, SRE, platform engineering, cloud infrastructure, or systems engineering experience.
• Hands‑on experience with Kubernetes in production; GKE experience is strongly preferred.
• Strong Terraform skills, including modules, remote state concepts, review practices, and safe promotion of infrastructure changes.
• Experience building and troubleshooting CI/CD pipelines, preferably with GitLab CI and container‑based runners.
• Comfortable with Linux, containers, networking fundamentals, DNS, TLS, ingress, load balancing, and cloud IAM concepts.
• Practical scripting or programming ability in Bash, Python, Go, or similar for automation and operational tooling.
• Experience with monitoring and incident diagnostics using metrics, logs, traces, dashboards, and alerting platforms such as Datadog.
• Security‑minded approach to secrets, credentials, RBAC, service accounts, auditability, and least‑privilege access.
• Clear communication skills and ability to work with developers, product teams, architects, security teams, and vendors.

Preferred Experience

• HashiCorp Vault administration or app/pipeline integration experience, including Kubernetes auth or GitLab JWT auth.
• GKE upgrade planning, backup for GKE, persistent volume restore, disaster recovery, or production maintenance experience.
• PostgreSQL operational awareness, managed database backup/recovery concepts, and application connectivity troubleshooting.
• Argo CD, Helm, Kustomize, Istio/service mesh, policy‑as‑code, or Kubernetes admission control experience.
• SonarQube, SAST/DAST, dependency scanning, container scanning, or DevSecOps enablement experience.
• Experience working in regulated environments where change management, evidence, documentation, and compliance matter.

Technology Environment

• Google Cloud Platform
• GKE, Kubernetes, containers
• GCP IAM, networking, and managed services
• Terraform and Terraform Cloud for Infrastructure as Code
• GitLab CI/CD, GitLab runners, release automation, quality gates, and deployment workflows
• HashiCorp Vault, Vault namespaces, Kubernetes/JWT auth patterns, TLS, least privilege, and secure pipeline secret retrieval
• Datadog metrics, logs, dashboards, monitors, alert tuning, and operational health reporting
• Backup and recovery practices, persistent volume protection, database backup awareness, restore testing, incident response, and change validation

Benefits

• Salary range: $72,000.00 – $108,000.00 per year.
• Potential annual incentive award pursuant to short‑term incentive plan and long‑term incentive plan (if applicable).
• Group benefits and retirement plans.

Equity and Inclusion

As one of Canada’s largest defined benefit pension plans, our people‑first culture is at its best when our workforce reflects the communities where we live and work and the members we proudly serve.

Equal Opportunity Employer

We are an equal opportunity employer committed to an inclusive, barrier‑free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down, and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our committee and employee recognition programs.

Recruitment Process

Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision‑making remain central to your candidate experience.

Posting Status

This posting is for an existing vacancy.