> Markdown version of [/jobs/ext/1216295-cloud-migration-architect-engineer](https://www.wearedevelopers.com/jobs/ext/1216295-cloud-migration-architect-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Migration Architect/Engineer - **Company:** TELUS - **Location:** Ontario, CA, United States (Remote available) - **Salary:** $125,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Cloud Computing, Linux, Domain Name System (DNS), Federated Identity Management, Github, Identity and Access Management, IP Addressing, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Windows Servers, OpenID, Load Balancing, Amazon Virtual Private Cloud (VPC), Backend, Cloud Migration, Firewall Services Module, Terraform, Vulnerability Analysis - **Published:** July 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ae3179cdc0e16475 ## About the Role We are seeking an experienced GCP Cloud Migration Engineer for a high-priority, active lift-and-shift migration. This is a complex brownfield estate migration with a hard contractual datacenter exit deadline., 1. Critical Legacy Infrastructure Experience * Proven track record of working in complex, undocumented brownfield environments. * Experience handling end-of-life OS, single Active Directory domains spanning prod/non-prod, and unmapped subnets. * Ability to make sound judgment calls mid-delivery when discovery reveals infrastructure surprises. 2. GCP & Networking Expertise * Deep knowledge of GCP-native architecture: hub-and-spoke VPC, Cloud VPN, hierarchical firewall policies, IAM, and organisation policy management. * Strong understanding of GCP URL maps, backend service models, split-horizon DNS, path-based routing patterns, and SSL certificate migration. 3. Terraform & CI/CD Pipelines * Advanced, hands-on Terraform experience (zero click-ops environment). * Hands-on experience with GitHub Actions, WIF, and keyless authentication (no service account keys allowed). 4. Security, Compliance & Regulation * Prior experience working in highly regulated environments under HIPAA and/or PIPEDA frameworks. * Familiarity with Wiz security scanning (branch level), Wiz CSPM monitoring, and CrowdStrike EDR on workloads. 5. Delivery Under Pressure * Ability to deliver high-quality infrastructure solutions under tight, contractually mandated datacenter exit deadlines. ## Description * Legacy Migration: Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies. * Load Balancing Adaptation: Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime. * Infrastructure as Code: Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines. * Secure Pipeline Management: Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication. * Security & Compliance: Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks. * Hybrid Connectivity: Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites. * AI-Driven Discovery: Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [AWS Migration within 3 months](https://www.wearedevelopers.com/videos/196-aws-migration-within-3-months) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)