Senior Software Engineer, DevOps & Security

<img src="https://app.gurulink.ca/img/gl_logo_112x112.jpg" border="0"><br><br><b>Location:</b> Vancouver, British_Columbia - Canada<br><b>Job Type:</b> Permanent<br><br><b>Description:</b><p>This role suits someone systems-minded, pragmatic, security-aware, and averse to repetitive manual work. You'll step in when the platform is on fire, but your focus is prevention over reaction.<br><br>You'll own real infrastructure at real scale, with authority over the IaC, GKE, and CI/CD architecture every team depends on, and you'll help shape how an AI-first engineering org ships software safely.<br><br><h4>This is a Hybrid role:</h4><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; 3 days a week</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Office located downtown Vancouver</span><br><br><h4>What You'll Do:</h4><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Build and extend a Pulumi component library so teams get correct, disaster-recovery-ready infrastructure by default instead of hand-rolling stacks across multiple GCP environments.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Run GKE as a product, handling cluster and node pool upgrades, in-cluster services, workload right-sizing, and policy enforcement.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Own the core building blocks of CI/CD workflows, cut CI time and flake rate fleet-wide, and standardize the golden path for shipping services so pipelines stay out of engineers' way.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Own the health of the observability stack, with consistent instrumentation, actionable alerts, and less on-call noise, so production stays easy to understand.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Drive GCP and LLM cost reduction through attribution, right-sizing, commitment planning, and removal of orphaned resources.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Own AIOps/MLOps for production AI workflows &#8212; deployment, monitoring, and reliability for the models the team ships.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Extend software supply chain controls, own infrastructure identity and access, and build SOC 2 and other compliance requirements into automated, evidenced controls so the secure path is also the fast path and audits are a byproduct of how the team builds.</span><br><br><h4>Tech Stack:</h4>GCP, Kubernetes, Pulumi (IaC), Postgres, Temporal</p><br><b>Must Have skills:</b><p><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Deep, hands-on experience in DevOps, SRE, platform, or infrastructure engineering, operating production systems that paying customers depend on, including on-call ownership.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Deep, practical Kubernetes knowledge.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Infrastructure as code treated as software (Pulumi or Terraform).</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Strong GCP or AWS fundamentals.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Background in systems engineering and writing software.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; CI/CD owned as a product: you've built and maintained pipelines used by other teams. GitHub Actions or Buildkite preferred; GitLab CI or CircleCI experience transfers.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Hands-on experience with security tooling as an engineering practice.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Compliance engineering for SOC 2 or enterprise partner security programs, implemented as automated controls; threat modeling and related practices.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Ownership under ambiguity: you scope a vague problem, ship it incrementally, and tell people clearly what changed and why.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Hands-on AIOps/MLOps experience &#8212; deploying and monitoring machine learning systems in production.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Fluency with AI coding tools and experience working on AI-first teams.</span></p><br><b>Nice to have skills:</b><p><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Ownership of platform migrations and decommissions.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Built an internal developer platform or self-service tooling that other engineers adopted.</span><br><span style="padding:0px 0px 0px 20px; display:inline-block;">&#8226; Comfort with LLM infrastructure (gateways, token cost attribution, rate limiting, provider failover)</span></p><br><b>Job Function:</b> Senior Software Engineer, but the client is explicitly open to DevOps Engineer / Platform Engineer / Platform Security Engineer titles.<br><br><br>

Browse all jobs