Zafin
Driving banking modernization to enable increased revenue, profitability and enhanced customer experiences.
Centralized Billing • Revenue Management • Product and Pricing Lifecycle Management • Digital Banking • Digital Transformation
501 - 1000
Principal Cloud Engineer
Yesterday
🏢 In-office - Toronto
Ansible
AWS
Azure
Bash
Chef
Cloud
Google Cloud Platform
Grafana
Jenkins
Kubernetes
Prometheus
Puppet
Python
TCP/IP
Terraform
Zafin
Driving banking modernization to enable increased revenue, profitability and enhanced customer experiences.
Centralized Billing • Revenue Management • Product and Pricing Lifecycle Management • Digital Banking • Digital Transformation
501 - 1000
Description
• Responsible for driving the complete automation of platform provisioning, configuration, and management. • Leverage tools such as Terraform, Azure, AKS, Kubernetes, Kustomize, Helm, Argo CD, and GitOps. • Support development teams to deliver high-quality software faster, more reliably, and securely. • Lead design and implementation of Cloud Infrastructure Platform based on Azure and AKS. • Drive complete automation of platform provisioning, configuration, and management using Terraform and Argo CD. • Develop automated workflows with CI/CD pipelines. • Design and maintain GitOps workflows using Argo CD. • Implement self-healing and auto-scaling mechanisms to enhance platform resilience and performance. • Collaborate closely with the Cloud Operations team for support and maintenance tasks. • Deliver self-service documentation for development and operations teams. • Provide L3 and L4 support for Cloud Platform-related Incidents.
Requirements
• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field. • Azure and Kubernetes Certifications preferred • 8+ years of experience in DevOps, Cloud Infrastructure, and Platform Engineering. • Extensive experience and strong expertise with Terraform for infrastructure as code (IaC): Proficient in designing, writing, and maintaining Terraform configurations, utilizing modules for modular and reusable code. • Extensive experience and strong expertise in Azure services, especially Azure Kubernetes Service (AKS): Deep understanding and extensive experience with Azure cloud services and hands-on experience managing AKS clusters. • Strong expertise in Kubernetes: Comprehensive knowledge of Kubernetes architecture, cluster setup, management, and troubleshooting. CKA certification is preferred. • Proficient in using Helm charts and Kustomize for Kubernetes resource management. • In-depth knowledge of Argo CD tool and GitOps principles: Experience in setting up and managing Argo CD for automated deployments and GitOps workflows. • Strong Experience with CI/CD pipelines: Expert in developing, managing, and optimizing CI/CD pipelines using Azure Pipelines and other tools like Jenkins and GitHub Actions • Hands-on experience with Kubernetes Observability tools such as Grafana, Prometheus and Azure suite of Observability tools such as Azure Monitor, Application Insights, Container Insights, Log Analytics, and Azure Network Watcher for monitoring and alerting on application and infrastructure health and performance. • Proficiency in scripting languages (Python, Bash): Capable of writing scripts to automate tasks and manage configurations. • Experience with configuration management tools (Ansible, Chef, Puppet): Knowledgeable in using these tools for automating system configurations. • Cloud Networking Architecture: Proficient in designing and managing cloud-native networking architectures, including Virtual Networks, Subnets, and Network Security Groups in Azure, AWS, or GCP. Hands-on experience with Azure Virtual Network, Private Link, and Service Endpoints for secure and scalable connectivity. • Cloud Load Balancing and Traffic Management: Expertise in cloud-native load balancing (e.g., Azure Load Balancer, Application Gateway) and traffic management (Azure Traffic Manager, AWS Route 53) to ensure high availability and optimized traffic routing. • Cloud-Native Security & VPN: Advanced knowledge of cloud-native security models, including Zero Trust Architecture, Security Groups, Network ACLs, and cloud-native firewall services (Azure Firewall, AWS Network Firewall). Proficient in implementing VPNs using IPSec and designing secure, high-performance VPN connections. • IP Networking (subnetting, TCP/IP, Dynamic routing) and good Knowledge of cryptography ciphers • Kubernetes Networking: Strong understanding of Kubernetes networking concepts, including pod networking, services, ingress, and egress configurations. Experience with CNI (Container Network Interface) plugins such as Calico, Flannel, or Cilium for secure, scalable network policies within Kubernetes clusters. • Azure Virtual WAN Hub: Expertise in configuring and managing Azure VWAN Hub, with hands-on experience in integrating it with Azure Firewall for secure, scalable, and efficient connectivity across different regions or hybrid cloud environments • Strong understanding of Identity and Access management (IAM) and experience with tools like Okta, Azure AD, Ping Identity or Auth0
Benefits
• Competitive salaries • Annual bonus potential • Generous paid time off • Paid volunteering days • Wellness benefits • Robust opportunities for professional growth and career advancement
Apply Now