Cloud Migration Architect/Engineer
Telus Digital
| Company | Telus Digital |
| Category | Engineering |
| Location | Remote |
| Remote | Remote |
| Employment | Not stated |
| Level | Lead |
| Salary | USD 125k |
| Posted | 7 Jul 2026 |
| Last verified | 30 Jul 2026 |
| Source | Employer career page (ashby) |
Description
WHO WE ARE
Welcome to TELUS Digital https://www.telusdigital.com/— where innovation drives impact at a global scale. As an award-winning digital product consultancy and the digital division of TELUS https://www.telus.com/en/, one of Canada’s largest telecommunications providers, we design and deliver transformative customer experiences through cutting-edge technology, agile thinking, and a people-first culture.
With a global team across North America, South America, Central America, Europe, Africa, and APAC, we offer end-to-end expertise across eight core service areas: Digital Product Consulting, Digital Marketing Services, Data & AI, Strategy Consulting, Business Operations Modernization, Enterprise Applications, Cloud Engineering, and QA & Test Engineering.
From mobile apps and websites to voice UI, chatbots, AI, customer service, and in-store solutions, TELUS Digital enables seamless, trusted, and digitally powered experiences that meet customers wherever they are — all backed by the secure infrastructure and scale of our multi-billion-dollar parent company.
THE OPPORTUNITY
We are seeking an experienced GCP Cloud Migration Engineer for a high-priority, active lift-and-shift migration. This is a complex brownfield estate migration with a hard contractual datacenter exit deadline.
You will navigate a highly regulated, undocumented legacy environment and transform it into a modern, GCP-native infrastructure. Everything in this environment is auditable, everything is code, and every change is scrutinised. There is zero tolerance for manual console changes or "click-ops."
RESPONSIBILITIES
1. Legacy Migration: Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies.
2. Load Balancing Adaptation: Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime.
3. Infrastructure as Code: Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines.
4. Secure Pipeline Management: Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication.
5. Security & Compliance: Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks.
6. Hybrid Connectivity: Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites.
7. AI-Driven Discovery: Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.
QUALIFICATIONS
1. Critical Legacy Infrastructure Experience
- Proven track record of working in complex, undocumented brownfield environments.
- Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets.
- Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises.
2. GCP & Networking Expertise
- Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management.
- Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration.
3. Terraform & CI/CD Pipelines
- Advanced, hands-on Terraform experience (zero click-ops environment).
- Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed).
4. Security, Compliance & Regulation
- Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks.
- Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads.
5. Delivery Under Pressure
- Ability to deliver high-quality in