Maarut Inc. Logo

Maarut Inc.

Senior Cloud Engineer

Posted 10 Days Ago
Be an Early Applicant
In-Office
Toronto, ON, CAN
Senior level
In-Office
Toronto, ON, CAN
Senior level
Lead production stand-up and cutover for a Canadian AWS environment: create org-separated production account, apply Terraform modules, configure KMS/IAM/SCPs, enable CI/CD gated deploys, deploy key-custody and blockchain keys, validate runbooks, perform vendor and KYC/ComplyAdvantage integrations, execute production cutover and hyper-care.
The summary above was generated by AI
  • Production stand-up (early in the engagement).
  • Create the production AWS account in the Canadian region (ca-central-1), organizationally separate from staging, with Organization-level federation. This requires AWS Organization administrator credentials Parx alone cannot exercise
  • Apply the Parx-built Terraform modules to the production account: baseline service-control policies (data residency, root denial, multi-factor authentication, public-S3 denial, security-service denial), customer-managed KMS keys, least-privilege IAM roles, CloudWatch alarms and log shipping, S3 with seven-year Object Lock retention, AWS Secrets Manager with rotation lambdas
  • Activate the CI/CD production pipeline with environment-gated deploys (manual approval required for production)
  • Production deployment of the signed-receipt KMS asymmetric migration (already validated in dev and staging)
  • Production deployment of the operational key-custody infrastructure (already validated in dev and staging): rotating service keys for the application layer, validator keys for the permissioned blockchain nodes, and privacy keys for the private-transaction layer
  • Validate the Parx-drafted production runbooks against the live environment; revise where production behaviour differs from staging
  • Live vendor cutover (sequenced through the active window).
  • (KYC) - swap the Parx-built adapter from mock mode to live Persona sandbox credentials in dev and staging, then production cutover
  • Comply Advantage (sanctions, politically-exposed-person, adverse-media screening) - same pattern, sandbox then production
  • Balance Custody (qualified custodian, multi-party-computation 2-of-3 architecture) - testnet integration (target end of June 2026); production cutover at the production key ceremony
  • Production cutover and hyper-care (S-anchored).



Similar Jobs

8 Days Ago
Easy Apply
Hybrid
Toronto, ON, CAN
Easy Apply
Senior level
Senior level
Marketing Tech • Mobile • Software
Join the Cloud Data Ingestion & Transformation team to design, build, and operate scalable data ingestion and transformation systems. Own end-to-end features (primarily back-end with front-end delivery), process very high data volumes, drive architectural decisions, and improve platform reliability and customer data integrations.
Top Skills: Amazon SqsApache AirflowApache KafkaDistributed SystemsDjangoETLMicroservicesPythonRabbitMQReactRuby On RailsSidekiqSnowflake
6 Days Ago
In-Office
Senior level
Senior level
Information Technology • Professional Services • Sales • Consulting
Design, build, and support scalable cloud-native applications and platforms on Azure. Implement containerization, CI/CD, IaC, observability, and security best practices. Troubleshoot production systems, create technical documentation and test plans, lead design reviews, and mentor internal teams.
Top Skills: AksAnsibleAWSAzure App ServicesAzure DevopsAzure FunctionsCi/CdDockerGitGitGitlabHypervisorIacJenkinsKubernetesAzureOpenshiftPythonRestful ApisVirtualizationVMware
17 Days Ago
Remote or Hybrid
Canada
Senior level
Senior level
Cloud • Insurance • Payments • Software • Business Intelligence • App development • Big Data Analytics
Design, build, and operate enterprise-scale multi-cloud infrastructure (Azure primary, GCP, AWS exposure). Own landing zones, Terraform modules, production AKS/GKE Kubernetes, Vault secrets, hybrid networking, CI/CD pipelines, monitoring, DR, and automation (Ansible, Python/Bash). Mentor engineers, document runbooks, and collaborate with security, application teams, and leadership to ensure secure, reliable, cost-optimized cloud platforms.
Top Skills: AksAnsibleApp GatewayArtifact RegistryAWSAwxAzureAzure DevopsAzure MonitorAzure StorageBashBgpBigQueryCloud BuildCloud LoggingCloud RunCloud SqlCloudboltDatadogDnsEc2EksGitlab CiGkeGoogle Cloud MonitoringGoogle Cloud Platform (Gcp)Hashicorp VaultHelmIamJenkinsKubernetesLoad BalancingManaged IdentityNsgPowershellPrivate EndpointsPythonS3SignozTerraformVertex AiVpcVpc Service ControlsVpnWorkload Identity

What you need to know about the Toronto Tech Scene

Although home to some of the biggest names in tech, including Google, Microsoft and Amazon, Toronto has established itself as one of the largest startup ecosystems in the world. And with over 2,000 startups — more than 30 percent of the country's total startups — Toronto continues to attract new businesses. Be it helping entrepreneurs manage their finances, simplifying business operations by automating payroll or assisting pharmaceutical companies in launching new drugs, the city's tech scene is just getting started.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account