Cloud Migration Architect/Engineer

TELUS Digital • , ON

3d • CA$125,000 - CA$135,000

About The Position

TELUS Digital is seeking an experienced GCP Cloud Migration Engineer for a high-priority, active lift-and-shift migration. This is a complex brownfield estate migration with a hard contractual datacenter exit deadline. The role involves navigating a highly regulated, undocumented legacy environment and transforming it into a modern, GCP-native infrastructure. The environment requires everything to be auditable, everything to be code, and every change to be scrutinised, with zero tolerance for manual console changes or "click-ops."

Requirements

• Proven track record of working in complex, undocumented brownfield environments.
• Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets.
• Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises.
• Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management.
• Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration.
• Advanced, hands-on Terraform experience (zero click-ops environment).
• Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed).
• Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks.
• Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads.
• Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines.

Responsibilities

• Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies.
• Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime.
• Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines.
• Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication.
• Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks.
• Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites.
• Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed