Senior Cloud Engineer

Senior Cloud Engineer (AWS, Azure, GCP) | Technology/Cloud Infrastructure Team

Remote| Full Time | Canada

Zonda is redefining the future of housing. We are perfectly placed in the heart of the fast-growing real estate industry. We are making big bets on the future of real-estate, trailblazing a 2030 vision for the industry. Here at Zonda, you’ll be able to use your passion and curiosity to drive the next generation of real estate analysts, advisors, and technologists.

Zonda is looking for a passionate Senior Cloud Engineer to evolve and expand our team. Zonda looks for people who can grow, think, dream, and create. When you join our team, you’ll be in a unique position to make a change with every project. You’ll use your full range of skills to build great experiences and learn about the real estate industry, economics, and data. You’ll be supported with the necessary tools, and you'll be working with an awesome and like-minded team. Our teams are innovative, diverse, multidisciplinary, and collaborative - all working to build the future of housing.

Within this role you will design, build, and operate the multi-cloud platform that underpins our most critical business systems. You will be the senior technical voice on a team responsible for production workloads across Amazon Web Services (primary), Microsoft Azure, and Google Cloud Platform, partnering with software engineering and IT operations team members to deliver scalable, resilient, and cost-efficient infrastructure.

This is a hands-on engineering role with significant influence over architecture, standards, and tooling. You will lead complex migrations, harden production environments, and act as a trusted technical advisor to leadership on cloud strategy.

What You'll Do

• Architect and implement production-grade infrastructure across AWS, Azure, and GCP, with an emphasis on automation, repeatability, and least-privilege security.
• Lead the design of landing zones, account/subscription/project structures, network topology (Transit Gateway, vWAN, Shared VPC), and identity federation across all three clouds.
• Support and assist in maintaining Infrastructure as Code at scale using Terraform and/or OpenTofu, with reusable modules, automated testing, and policy-as-code guardrails (OPA, Sentinel, Azure Policy, AWS SCPs, GCP Org Policy).
• Design and operate Kubernetes platforms (EKS, AKS, GKE) including service mesh, ingress, autoscaling, multi-tenancy, and platform observability.
• Provide support to the engineering team for the CI/CD platform — pipelines, artifact management, secret handling, deployment patterns (blue/green, canary, progressive delivery)
• Implement comprehensive observability (metrics, logs, traces) using tools such as Prometheus, Grafana, Datadog, CloudWatch, Azure Monitor, and Cloud Operations Suite.
• Drive cloud cost optimization through rightsizing, commitment planning (Savings Plans, Reservations, CUDs), tagging strategy, and FinOps practices.
• Act as the security lead to develop best practices for identity and access (IAM, Entra ID, Cloud IAM), encryption (KMS, Key Vault, Cloud KMS), network security, secret management, and compliance evidence (SOC 2, ISO 27001, HIPAA, PCI as applicable).
• Lead production incident response for cloud platform issues, conduct blameless postmortems, and drive systemic remediation.
• Manage and administer troubleshooting and resolution of support and access requests for all other tickets within a Jira support queue
• Evaluate emerging cloud services and represent the team in cross-functional architecture forums.

Required Qualifications

• 8+ years of professional experience in cloud, platform, or infrastructure engineering, with at least 5 years' operating production workloads at scale.
• Deep, hands-on expertise in AWS across compute (EC2, ECS, EKS, Lambda), networking (VPC, Transit Gateway, PrivateLink, Route 53), storage (S3, EBS, EFS), data (RDS, Aurora, DynamoDB), and security (IAM, KMS, GuardDuty, Security Hub, Organizations).
• Minimum of 4 years developing and managing cost optimization within multiple cloud environments with a deep understanding of commitment plans
• Strong production experience with Microsoft Azure (AKS, App Service, Functions, Virtual Network, Entra ID, Key Vault, Azure Monitor, Azure Policy).
• Strong production experience with Google Cloud Platform (GKE, Cloud Run, VPC/Shared VPC, IAM, Cloud KMS, BigQuery, Cloud Logging/Monitoring).
• Expert proficiency with Terraform (or OpenTofu), including module design, remote state, workspace strategy, and CI integration.
• Proficiency in at least one general-purpose programming language used for automation and tooling — Python and/or Go preferred; Bash is expected.
• Strong Kubernetes experience: workload design, RBAC, networking (CNI, ingress, service mesh), Helm, GitOps (Argo CD or Flux), and platform-level operations.
• Solid understanding of Linux internals, networking fundamentals (TCP/IP, DNS, TLS, BGP basics), and distributed systems concepts.
• Demonstrated experience supporting CI/CD systems (GitHub Actions, GitLab CI, Azure DevOps, Jenkins, or similar)
• Experience implementing cloud security controls and operating within compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, FedRAMP, or equivalent).
• Excellent written and verbal communication skills; able to translate complex technical concepts for both engineering and executive audiences.
• Active or in progress senior-level certifications: AWS Solutions Architect Professional

Preferred Qualifications

• Active senior-level certifications: DevOps Engineer Professional, Microsoft Certified: Azure Solutions Architect Expert, Google Professional Cloud Architect.
• Experience with multi-cloud connectivity and identity federation (e.g., AWS IAM Identity Center, Entra ID federation, Workload Identity Federation).
• Experience leading large-scale migrations (data center to cloud, or cross-cloud) and refactoring monoliths to cloud-native architectures.
• Hands-on FinOps practice: anomaly detection, showback/chargeback, unit-cost engineering.
• Familiarity with data platform components (Snowflake, Databricks, Kafka/MSK/Event Hubs/Pub-Sub) and their cloud integration patterns.
• Experience with edge and hybrid services (AWS Outposts, Azure Arc, Anthos).
• Prior experience as a tech lead or staff engineer

Education

Bachelor's degree in computer science, engineering, or a related field, or equivalent practical experience. Advanced degree is a plus but not required.