Staff Cloud Platform Engineer

Insight Enterprises, Inc.•Toronto, ON

1d•Remote

About The Position

We are looking for a Staff Cloud Engineer with deep expertise in cloud migration programs and API management to join our professional services practice. In this role, you will own delivery outcomes across complex, multi-workstream engagements — coordinating engineers, advising customer stakeholders on technical strategy, and serving as the authoritative voice on migration architecture and API platform design. Success looks like this: customer programs that deliver on time and on scope, engineers who are unblocked and accountable, and customers who trust your judgment enough to bring you their next challenge before the current one is finished.

Requirements

8+ years of hands-on cloud engineering experience, with at least 4 years in a professional services, consulting, or delivery-led environment.
Demonstrated experience leading end-to-end cloud migration programs at enterprise scale — multi-wave, multi-team datacenter exit or estate transformation programs involving 500+ workloads.
Demonstrated experience designing and governing Apigee X or Apigee Hybrid deployments in production enterprise environments, including legacy gateway migration programs.
Assess customer estates holistically and assign the correct migration pattern — rehost, replatform, refactor, rebuild, retire, or replace — based on application complexity, business criticality, technical debt, and cost of change; no single pattern dominates.
Lead Complex Estate Transformations end-to-end: multi-layer coordination across application, data, network, and security workstreams; custom tooling development where standard products are insufficient.
Select and deploy the right migration tooling for each program: Migrate to Virtual Machines, Migrate to Containers, Database Migration Service, Striim, Datastream, Carbonite Migrate, Zerto — matched to program constraints, not defaulted to.
Design hybrid and multi-cloud architectures required during phased datacenter exits where workloads must operate across on-premises and GCP simultaneously during transition.
Advise customers on migration strategy at an executive level — including the honest recommendation to retire, replace, or not migrate specific workloads — with impartiality and without defaulting to the approach that maximizes delivery scope.
Own migration program governance: wave sequencing, dependency tracking, risk register management, rollback planning, and executive-level customer reporting across complex programs.
Scope and estimate migration complexity using structured discovery and assessment tooling (CloudPhysics, Turbonomic, Migrate to Virtual Machines discovery); produce estimates defensible to customers that hold through delivery.
Architect multi-region Apigee X deployments with Global Load Balancing, cross-region failover, and Private Service Connect for southbound connectivity to distributed backends.
Design and deliver Apigee Hybrid deployments on GKE for organizations managing APIs across on-premises and GCP simultaneously; own the operational model for hybrid runtime management.
Design Global API Mesh: org-wide shared flow governance, reusable security fragment libraries, standardized error taxonomies, and API product portfolio governance across multiple teams and business units.
Lead large-scale legacy gateway migration programs (MuleSoft, Kong, Akana, AWS API Gateway, Azure API Management) to Apigee: proxy inventory, policy equivalence mapping, proxy template design, migration wave sequencing, and northbound cutover planning.
Advise on API product strategy, versioning policies, deprecation paths, and the organizational model for API producer and consumer teams — including governance structures that prevent API sprawl at enterprise scale.
Implement Advanced API Security: bot detection, volumetric threat protection, OAuth2/OIDC, JWT verification and generation, mutual TLS, and integration with enterprise identity providers (Okta, Azure AD, Google Cloud Identity, Ping Identity).
Build and maintain end-to-end CI/CD pipelines for infrastructure and API delivery using Cloud Build, GitHub Actions, GitLab CI, or Tekton; implement IaC orchestration tooling (Spacelift, Atlantis, or Terraform Enterprise) with appropriate access controls.
Write production-grade Terraform modules; manage remote state and multi-environment workspaces; resolve state conflicts and drift in delivery environments.
Implement API Ops CI/CD pipelines using Maven or Python Apigee plugins; understand release orchestration patterns (blue/green, canary) using Cloud Deploy or ArgoCD.
Configure structured observability: SLIs, SLOs, custom dashboards, and alerting policies relevant to migration and API platform delivery programs.
Execute database migrations using Database Migration Service for homogeneous migrations; understand prerequisites, failure modes, and when to escalate to heterogeneous migration tooling (Striim, Datastream).
Contribute to application re-platforming workstreams: containerization onto GKE or Cloud Run, workload identity configuration, and namespace design.
Understand BigQuery as a modernized analytical platform; contribute to upstream pipeline integration where migrations produce new data flows.
Identify when post-migration modernization — event-driven decoupling, managed database adoption, or GKE re-platforming — represents a genuine follow-on opportunity for the customer.
Google Cloud Professional Cloud Architect
Google Cloud Professional Cloud Network Engineer (or active pursuit at time of hire)
One additional Google Cloud Professional certification relevant to the engagement portfolio (e.g., Professional Cloud DevOps Engineer, Professional Cloud Security Engineer)
Proven ability to communicate technical strategy, risk, and trade-offs to VP-level and senior technical stakeholders in a consulting context — not just internally.
Experience managing delivery across a team of 3–6 engineers; demonstrated accountability for team output quality, not just personal contribution.
Experience producing and defending workstream-level estimates; track record of estimates that hold through delivery.

Responsibilities

Own delivery outcomes across multiple parallel workstreams simultaneously, including large-scale cloud migration programs and API management engagements; accountable for overall team output quality across L2–L4 engineers.
Lead complex estate transformations: coordinate multi-layer migration programs spanning application, data, network, and security teams across coordinated waves with hard decommission deadlines.
Architect and govern API platforms: design multi-region Apigee X deployments, Global API Mesh governance structures, and large-scale legacy gateway migrations (MuleSoft, Kong, Akana, AWS API Gateway) from proxy inventory through northbound cutover.
Validate all workstream estimates before they are presented to customers; own the accuracy of the overall delivery timeline and escalate scope risks before they become delivery failures.
Act as a trusted technical advisor to customer architects, program managers, and senior stakeholders on migration strategy, API platform governance, and cross-domain trade-offs.
Gather requirements directly from customer stakeholders and translate them into scoped, deliverable technical programs — without requiring a project manager to mediate the conversation.
Identify and own escalations within engagements; resolve technical blockers and delivery risks before they surface as customer issues.
Proactively identify expansion opportunities beyond the current statement of work — post-migration modernization, API monetization, governance maturity programs, or platform engineering follow-ons — and shape those conversations with customer stakeholders.
Challenge misaligned decisions: push back on unrealistic timelines, over-scoped commitments, or technically misguided PM proposals with data and reasoned alternatives.
Mentor and coordinate L2–L4 engineers across delivery programs; conduct technical reviews, validate architecture decisions, and hold the team accountable for quality and pace.
Contribute to practice IP: produce reusable assessment frameworks, migration wave templates, Apigee proxy accelerators, and API Ops pipeline templates that reduce delivery time on future engagements.