Senior DevOps Engineer

Haventree Bank is a private Canadian Schedule 1 bank specializing in alternative mortgage programs and insured GIC deposits. We help hardworking Canadians from coast-to-coast achieve homeownership by offering flexible mortgage solutions. Our insured GIC deposits offer competitive rates and are available through a variety of wealth management platforms.  

About Haventree Bank  

Headquartered in Toronto, Ontario, Haventree Bank (Haventree) is a mission driven alternative mortgage lender. The name Haventree is representative of the bank’s mission to help its customers find a place of refuge and to lay down new roots for the future. Haventree exists to be a catalyst of financial security and upward mobility for Canadians who are underserved by the traditional financial system. 

Position Summary:

Reporting to the Director, Infrastructure & IT Operations, the Sr. DevOps Engineer at Haventree Bank, you will be responsible for designing, implementing and managing a secure and efficient DevOps process as well as cloud infrastructure within Azure, AWS cloud environments.

Major Duties & Responsibilities:

• CI/CD Pipeline Development: Architect and maintain robust, automated CI/CD pipelines for efficient software delivery and deployment. Leverage tools such as GitHub Actions, Sonar Cloud, and Snyk to streamline development processes.
• Cloud Infrastructure Design & Management/Automation (IaaC): Drive automation in infrastructure provisioning, configuration management, and system monitoring using tools like Terraform and Bash/Python scripts.
• Security & Compliance: Implement security best practices aligned with federal and provincial regulatory requirements (OSFI, etc.), including continuous monitoring and vulnerability management. Ensure compliance across all stages of development and deployment.
• Azure Networking: Design and manage secure Azure network architectures including hub-and-spoke topologies, Virtual Networks (VNets), subnets, Network Security Groups (NSGs), User-Defined Routes, and VNet peering. Implement and operate Azure Firewall, Application Gateway with WAF, Azure Front Door, Private Endpoints, and Private Link to enforce zero-trust connectivity. Manage hybrid connectivity through ExpressRoute and Site-to-Site VPN gateways and administer Azure DNS (private and public zones) for reliable name resolution across environments. 
• Containerization & Orchestration: Utilize Docker and Kubernetes to containerize applications and deploy them in scalable environments.
• Performance Monitoring, Reporting & Optimization: Implement proactive monitoring, logging and reporting solutions (using Azure Monitor, MS Defender, AWS CloudWatch, etc.) to track and monitor system performance and identify potential issues before they impact operations.
• Incident Response & Troubleshooting: Investigate production issues, ensuring fast resolution while conducting thorough root cause analysis and applying preventative measures.
• Documentation & Reporting: Maintain comprehensive documentation of systems, processes, and configurations.
• Cost Optimization: Provide consultation on cost-effective solutions, balancing performance, security, and scalability while managing budget constraints.

Qualifications & Experience:

Degrees, Diplomas & Certifications:

• The position requires a Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent professional experience.

Years and Range of Experience Required to Perform the Job:

• 7+ years of experience in DevOps, Software Development, Cloud Engineering, or similar roles.
• Proven expertise in GitHub Actions/AzureDevOps, CI/CD pipeline design and implementation (Experience in AWS cloud platforms/DevOps is a plus)
• Extensive experience with Terraform for infrastructure provisioning and management
• Strong understanding of Azure networking concepts including hub-and-spoke architecture, VNets, subnets, NSGs, route tables, VNet peering, Private Endpoints, Azure Firewall, Application Gateway/WAF, Azure Front Door, ExpressRoute/VPN, and Azure DNS.Working knowledge of containerization technologies such  Docker and Kubernetes, AKS/EKS etc.
• Familiarity with security principles and regulatory compliance (e.g., OSFI, Quebec Law 25, PCI-DSS).
• Solid understanding of Azure Cloud services including monitoring, logging and reporting tools
• Solid scripting experience in Bash, PowerShell, Python, or similar languages.
• Strong troubleshooting and performance tuning skills in distributed systems.
• Experience working in an Agile, Kanban, or Scrum development environment.

Preferred Skills

• Certifications:
• Azure Cloud DevOps Engineer Certification.
• HashiCorp Terraform Associate or higher certification.
• Cloud Infrastructure & DevOps, CI/CD Tools: Experience with Amazon Web Service (AWS)  is a plus
• Security: Knowledge of ZTNA/SASE, DLP (Data Loss Prevention), Okta, and secure network topologies in cloud environments.
• Scripting & Automation: Familiarity with tools like Ansible, Chef, or Puppet for configuration management.
• Monitoring Tools: Experience with Cloud Native monitoring, logging and reporting tools
• Software Development: Experience with application development, tools and software engineering tools.

While we thank everyone for their interest in Haventree Bank, please note that only candidates selected for an interview will be contacted. Haventree Bank is committed to providing accommodation when needed. If you require an accommodation, we will work with you to meet your needs.  

1. As a job candidate, our recruitment process includes collecting personal information. Please click the link here to review our Privacy Policy. Privacy Statement | Haventree Bank
2. Stay in touch with us, if this position is not the right one for you – please click on this link for other roles at Careers | Haventree Bank or follow us on LinkedIn at www.linkedin.com/company/haventree-bank/
3. Haventree Bank embraces equal opportunity, diversity, and inclusion. Please let us know if you require any accommodations during the recruitment and selection process by contacting accessibility@haventreebank.com

#LI-TA1 

#LI-Hybrid