DevOps Engineer

Choose a workplace that empowers your impact.

Join a global workplace where employees thrive. One that embraces diversity of thought, expertise and experience. A place where you can personalize your employee journey to be — and deliver — your best.

We are a purpose-driven, dynamic and sustainable pension plan. An industry leading global investor with teams in Toronto to London, New York, Singapore, Sydney and other major cities across North America and Europe. We embody the values of our 665,000 members, placing their best interests at the heart of everything we do.

Join us to accelerate your growth & development, prioritize wellness, build connections, and support the communities where we live and work.

Don’t just work anywhere — come build tomorrow together with us.

Know someone at OMERS or Oxford Properties? Great! If you're referred, have them submit your name through Workday first. Then, watch for a unique link in your email to apply.

We are looking for a hands-on DevOps Engineer to help operate and evolve the platforms that power secure, reliable pension services across cloud, Kubernetes, CI/CD, secrets management, observability, and automation.

You will work with developers, architecture, security, data, and operations teams to improve how services are deployed, monitored, backed up, upgraded, and recovered across multiple cloud and platform environments.

This role is ideal for someone who enjoys solving production problems, simplifying complex platforms, and turning operational knowledge into repeatable automation and clear runbooks.

Technology Environment

• Google Cloud Platform, GKE, Kubernetes, containers, GCP IAM, networking, and managed services

• Terraform and Terraform Cloud for Infrastructure as Code

• GitLab CI/CD, GitLab runners, release automation, quality gates, and deployment workflows

• HashiCorp Vault, Vault namespaces, Kubernetes/JWT auth patterns, TLS, least privilege, and secure pipeline secret retrieval

• Datadog metrics, logs, dashboards, monitors, alert tuning, and operational health reporting

• Backup and recovery practices, persistent volume protection, database backup awareness, restore testing, incident response, and change validation

What You Will Do

• Design, implement, and maintain Kubernetes and cloud platform capabilities on GKE/GCP across application and shared platform environments.

• Build and improve GitLab CI/CD pipelines for infrastructure, application delivery, testing, security scanning, and controlled promotion between environments.

• Develop and maintain Terraform modules, environment configuration, and automated workflows that reduce manual operational effort.

• Operate HashiCorp Vault integrations for applications and pipelines, including secret access patterns, auth methods, policies, and namespace-aware usage.

• Improve observability with Datadog dashboards, service-level monitors, actionable alerts, and log/metric correlation for faster incident response.

• Support GKE upgrades, maintenance windows, rollout sequencing, workload validation, backup checks, and rollback planning.

• Partner with application teams to onboard services, troubleshoot deployments, tune resource requests/limits, and improve reliability.

• Participate in incident response, root cause analysis, production readiness reviews, and post-incident corrective action tracking.

• Create and maintain operational documentation, runbooks, architecture notes, and automation examples that help the team scale.

What You Bring

• 3+ years of DevOps, SRE, platform engineering, cloud infrastructure, or systems engineering experience.

• Hands-on experience with Kubernetes in production; GKE experience is strongly preferred.

• Strong Terraform skills, including modules, remote state concepts, review practices, and safe promotion of infrastructure changes.

• Experience building and troubleshooting CI/CD pipelines, preferably with GitLab CI and container-based runners.

• Comfortable with Linux, containers, networking fundamentals, DNS, TLS, HTTP/S, ingress, load balancing, and cloud IAM concepts.

• Practical scripting or programming ability in Bash, Python, Go, or similar for automation and operational tooling.

• Experience with monitoring and incident diagnostics using metrics, logs, traces, dashboards, and alerting platforms such as Datadog.

• Security-minded approach to secrets, credentials, RBAC, service accounts, auditability, and least-privilege access.

• Clear communication skills and the ability to work with developers, product teams, architects, security teams, and vendors.

Preferred Experience

• HashiCorp Vault administration or app/pipeline integration experience, including Kubernetes auth or GitLab JWT auth.

• GKE upgrade planning, Backup for GKE, persistent volume restore, disaster recovery, or production maintenance experience.

• PostgreSQL operational awareness, managed database backup/recovery concepts, and application connectivity troubleshooting.

• Argo CD, Helm, Kustomize, Istio/service mesh, policy-as-code, or Kubernetes admission control experience.

• SonarQube, SAST/DAST, dependency scanning, container scanning, or DevSecOps enablement experience.

• Experience working in regulated environments where change management, evidence, documentation, and compliance matter.

How We Work

• Automate first: repeatable changes should become code, templates, or documented workflows.

• Reliability is a product feature: backups, monitoring, capacity, performance, and rollback plans are part of delivery.

• Security is shared: pipelines, clusters, secrets, and access patterns should be secure by design.

• Documentation counts: runbooks, diagrams, decision records, and operational notes are maintained alongside technical changes.

• We value practical ownership: engineers are trusted to diagnose issues, propose improvements, and follow through.

Why Join Us?

• Work on meaningful services that support pension operations and member-facing capabilities.

• Use modern cloud, Kubernetes, DevOps, and observability tools in real production environments.

• Collaborate with experienced engineers across infrastructure, security, architecture, and application delivery.

• Shape standards, automation, and platform practices rather than simply operating someone else’s design.

• Grow through complex technical challenges, vendor-supported platforms, mentoring, and continuous improvement.

We believe that time together in the office is important for OMERS and Oxford, the strength of our employees, and the work we do for our pension members. In delivering on our pension promise, keeping us connected to our work and each other, our flexible hybrid work guideline requires teams to come in to the office 2 days per week.

This posting is for an existing vacancy.The expected salary range for this position is $72,000.00 - $108,000.00 per year.

You may also be eligible to receive an annual Incentive Award pursuant to our Short-term Incentive plan and our Long-Term Incentive plan (if applicable), and to participate in our group benefits and retirement plans – details on these elements of compensation are included within OMERS & Oxford offer letters.

As one of Canada’s largest defined benefit pension plans, our people-first culture is at its best when our workforce reflects the communities where we live and work — and the members we proudly serve.

From hire to retire, we are an equal opportunity employer committed to an inclusive, barrier-free recruitment and selection process that extends all the way through your employee experience. This sense of belonging and connection is cultivated up, down and across our global organization thanks to our vast network of Employee Resource Groups with executive leader sponsorship, our committee and employee recognition programs.

Artificial intelligence (AI) tools are used to support certain stages of the OMERS recruitment process. While AI assists us in our process, human judgment and decision-making remain central to our candidate experience.