Senior DevOps & Compliance Engineer

Senior DevOps & Compliance Engineer (Remote - Canada)
Location: Remote (Canada)
Engagement Type: B2B contractor
Salary: $100,000 USD/year (gross, depending on experience)
Company: Revenue Roll Inc. — US-based SaaS company building secure, high-scale data infrastructure for digital commerce.
About the Role
We’re consolidating multiple DevOps vendors into one high-impact in-house role. You’ll be responsible for building and operating a multi-cloud (AWS + GCP) infrastructure, driving observability and CI/CD governance, and owning our SOC 2 compliance automation.
This is a senior, hands-on position for someone who can combine infrastructure engineering, security, and automation — and enjoys owning systems end-to-end.
You’ll collaborate directly with our CTO and US engineering team (UTC-5 to UTC+2 overlap).
Responsibilities
Infrastructure & Automation
Manage and automate AWS (EKS, EC2, IAM, S3) and GCP (GKE, Cloud Functions, BigQuery) environments.
Maintain and expand Terraform infrastructure as code — from provisioning to drift detection.
Migrate and optimize workloads such as Neo4j Fabric, Airbyte, Kafka, and dbt across clouds.
Configure GPU-enabled EC2 and manage cost optimization (Spot + TCO tracking).
Observability & Monitoring
Implement Sumo Logic + OpenTelemetry pipelines for structured logging and distributed tracing.
Configure Slack-based alerting segmented by environment (dev, staging, prod).
Maintain health and cost dashboards across AWS, GCP, and data platform services.
CI/CD Governance
Own and enforce GitHub Actions pipelines (linting, coverage, schema validation).
Integrate Codecov, SonarQube, and dbt tests into CI/CD flows.
Ensure reproducible builds and audit-ready logs (coverage.xml, results.xml).
Security & Secret Management
Administer IAM roles and enforce MFA across AWS, GCP, GitHub, and Auth0.
Manage secrets via 1Password CLI and scan codebases using TruffleHog and GitGuardian.
Configure Lambda/GCS malware scanning for file storage.
SOC 2 Compliance Automation
Automate control evidence collection (logs, screenshots, IAM diffs).
Integrate compliance checks with GitHub Actions, Slack, and Sumo Logic.
Maintain structured audit folders (GCS/S3, Jira, Confluence).
Support quarterly access reviews and rotation monitoring.
Skills & Experience
Must-Have:
5+ years experience in DevOps, SRE, or Cloud Infrastructure roles.
Proven background in AWS and GCP operations, ideally multi-cloud.
Proficient with Terraform, GitHub Actions, and IaC security best practices.
Experience with Sumo Logic and OpenTelemetry SDKs (Node.js, Python, JS).
Working knowledge of Neo4j, Airbyte, Kafka, dbt, and BigQuery.
Comfortable implementing SOC 2 / ISO 27001 security and evidence frameworks.
Strong English communication (written and spoken).
Nice-to-Have:
Experience with Prometheus/Grafana dashboards.
Prior work with 1Password CLI, Auth0, or Salesbricks.
Familiarity with AWS Config, GCP Policy Analyzer, or compliance-as-code tooling.
What You’ll Deliver in the First 90 Days
Migrate GKE → EKS workloads and automate environment provisioning via Terraform.
Set up centralized logging (Sumo Logic) and distributed tracing (OpenTelemetry).
Implement CI/CD enforcement (coverage, schema validation, secrets scanning).
Deliver a SOC 2 evidence automation framework (Slack alerts, audit exports, test reports).
Work Setup
Full remote, flexible hours (overlap with US East Coast 3–4 hours/day).
Direct collaboration with CTO and engineering leads.
Asynchronous-first communication via Slack, GitHub, Notion, and Jira.
Why Join Tie
We’re building a modern data & identity infrastructure powering eCommerce personalization.
You’ll have full ownership of our infrastructure and compliance stack — no legacy baggage, no red tape.
You’ll work with modern tools — Terraform, EKS, OTEL, dbt, Kafka — and have autonomy to improve them.
$100K budget for the role, with annual performance and bonus upside.
How to Apply
Send your CV / GitHub profile and a short note describing:
A project where you implemented observability or SOC 2 automation.
Your favorite IaC or monitoring tool and why.
Interview process: Initial call with CTO (30 min) → Technical deep dive → Offer
Summary (For Recruiter Use)
Category
Details
Level

Work arrangement
Yes