Cloud Migration Architect/Engineer

Who We Are Welcome to TELUS Digital — where innovation drives impact at a global scale. As an award-winning digital product consultancy and the digital division of TELUS , one of Canada’s largest telecommunications providers, we design and deliver transformative customer experiences through cutting-edge technology, agile thinking, and a people-first culture. With a global team across North America, South America, Central America, Europe, Africa, and APAC, we offer end-to-end expertise across eight core service areas: Digital Product Consulting, Digital Marketing Services, Data & AI, Strategy Consulting, Business Operations Modernization, Enterprise Applications, Cloud Engineering, and QA & Test Engineering. From mobile apps and websites to voice UI, chatbots, AI, customer service, and in-store solutions, TELUS Digital enables seamless, trusted, and digitally powered experiences that meet customers wherever they are — all backed by the secure infrastructure and scale of our multi-billion-dollar parent company. The Opportunity We are seeking an experienced GCP Cloud Migration Engineer for a high-priority, active lift-and-shift migration. This is a complex brownfield estate migration with a hard contractual datacenter exit deadline. You will navigate a highly regulated, undocumented legacy environment and transform it into a modern, GCP-native infrastructure. Everything in this environment is auditable, everything is code, and every change is scrutinised. There is zero tolerance for manual console changes or "click-ops." Responsibilities Legacy Migration: Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies. Load Balancing Adaptation: Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime. Infrastructure as Code: Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines. Secure Pipeline Management: Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication. Security & Compliance: Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks. Hybrid Connectivity: Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites. AI-Driven Discovery: Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time. Qualifications 1. Critical Legacy Infrastructure Experience Proven track record of working in complex, undocumented brownfield environments. Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets. Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises. 2. GCP & Networking Expertise Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management. Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration. 3. Terraform & CI/CD Pipelines Advanced, hands-on Terraform experience (zero click-ops environment). Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed). 4. Security, Compliance & Regulation Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks. Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads. 5. Delivery Under Pressure Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines. Equal Opportunity Employer At TELUS Digital, we are proud to be an equal opportunity employer and are committed to creating a diverse and inclusive workplace. All aspects of employment, including the decision to hire and promote, are based on applicants’ qualifications, merits, competence and performance without regard to any characteristic related to diversity. We will only use the information you provide to process your application and to produce tracking statistics. Since we do not request personal data deemed sensitive, we ask you to abstain from sharing that information with us. For more information on how we use your information, see our Privacy Policy .