Senior DevOps & Compliance Engineer (Remote - Canada)
Location: Remote (Canada)
Engagement Type: B2B contractor
Salary: $100,000 USD/year (gross, depending on experience)
Company: Revenue Roll Inc. — US-based SaaS company building secure, high-scale data infrastructure for digital commerce.
About the Role
We’re consolidating multiple DevOps vendors into one high-impact in-house role. You’ll be responsible for building and operating a multi-cloud (AWS + GCP) infrastructure, driving observability and CI/CD governance, and owning our SOC 2 compliance automation.
This is a senior, hands-on position for someone who can combine infrastructure engineering, security, and automation — and enjoys owning systems end-to-end.
You’ll collaborate directly with our CTO and US engineering team (UTC-5 to UTC+2 overlap).
Responsibilities
Infrastructure & Automation
- Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.
- Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.
- Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.
- Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).
Observability & Monitoring
- Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing. Configure Slack-based alerting segmented by environment (dev, staging, prod).
- Maintain health and cost dashboards across AWS, GCP, and data platform services.
CI/CD Governance
- Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).
- Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.
- Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).
Security & Secret Management
- Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.
- Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.
- Configure Lambda/GCS malware scanning for file storage.
SOC 2 Compliance Automation
- Automate control evidence collection (logs, screenshots, IAM diffs).
- Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.
- Maintain structured audit folders (GCS/S3, Jira, Confluence).
- Support quarterly access reviews and rotation monitoring.
Skills & Experience
Must-Have:
- 5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.
- Proven background in AWS and GCP operations, ideally multi-cloud.
- Proficient with Terraform, GitHub Actions, and IaC security best practices.
- Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).
- Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.
- Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.
- Strong English communication (written and spoken).
Nice-to-Have:
- Experience with Prometheus/Grafana dashboards.
- Prior work with 1Password CLI, Auth0, or Salesbricks.
- Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling. What You’ll Deliver in the First 90 Days
- Migrate GKE → EKS workloads and automate environment provisioning via Terraform.
- Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).
- Implement CI/CD enforcement (coverage, schema validation, secrets scanning). Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).
Work Setup
Full remote, flexible hours (overlap with US East Coast 3–4 hours/day).
Direct collaboration with CTO and engineering leads.
Asynchronous-first communication via Slack, GitHub, Notion, and Jira.
Why Join Tie
- We’re building a modern data & identity infrastructure powering eCommerce personalization.
- You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.
- You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.
- $100K budget for the role, with annual performance and bonus upside.
How to Apply
Send your CV / GitHub profile and a short note describing: A project where you implemented observability or SOC 2 automation.
Your favorite IaC or monitoring tool and why.
Interview process: Initial call with CTO (30 min) → Technical deep dive → Offer
