Principal Cloud Engineer, Zafin
Product & pricing lifecycle management platform
Open for applications
Product & pricing lifecycle management platform
501-1000 employees
Open for applications
501-1000 employees
Company mission
To make banks more agile and efficient than ever before, enabling innovative experiences that improve the lives of customers and employees.
Role
Who you are
- Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field
- Azure and Kubernetes Certifications preferred
- 8+ years of experience in DevOps, Cloud Infrastructure, and Platform Engineering
- Extensive experience and strong expertise with Terraform for infrastructure as code (IaC): Proficient in designing, writing, and maintaining Terraform configurations, utilizing modules for modular and reusable code
- Extensive experience and strong expertise in Azure services, especially Azure Kubernetes Service (AKS): Deep understanding and extensive experience with Azure cloud services and hands-on experience managing AKS clusters
- Strong expertise in Kubernetes: Comprehensive knowledge of Kubernetes architecture, cluster setup, management, and troubleshooting. CKA certification is preferred
- Proficient in using Helm charts and Kustomize for Kubernetes resource management
- In-depth knowledge of Argo CD tool and GitOps principles: Experience in setting up and managing Argo CD for automated deployments and GitOps workflows
- Strong Experience with CI/CD pipelines: Expert in developing, managing, and optimizing CI/CD pipelines using Azure Pipelines and other tools like Jenkins and GitHub Actions
- Hands-on experience with Kubernetes Observability tools such as Grafana, Prometheus and Azure suite of Observability tools such as Azure Monitor, Application Insights, Container Insights, Log Analytics, and Azure Network Watcher for monitoring and alerting on application and infrastructure health and performance
- Proficiency in scripting languages (Python, Bash): Capable of writing scripts to automate tasks and manage configurations
- Experience with configuration management tools (Ansible, Chef, Puppet): Knowledgeable in using these tools for automating system configurations
- Cloud Networking Architecture: Proficient in designing and managing cloud-native networking architectures, including Virtual Networks, Subnets, and Network Security Groups in Azure, AWS, or GCP. Hands-on experience with Azure Virtual Network, Private Link, and Service Endpoints for secure and scalable connectivity
- Cloud Load Balancing and Traffic Management: Expertise in cloud-native load balancing (e.g., Azure Load Balancer, Application Gateway) and traffic management (Azure Traffic Manager, AWS Route 53) to ensure high availability and optimized traffic routing
- Cloud-Native Security & VPN: Advanced knowledge of cloud-native security models, including Zero Trust Architecture, Security Groups, Network ACLs, and cloud-native firewall services (Azure Firewall, AWS Network Firewall). Proficient in implementing VPNs using IPSec and designing secure, high-performance VPN connections
- IP Networking (subnetting, TCP/IP, Dynamic routing) and good Knowledge of cryptography ciphers
- Kubernetes Networking: Strong understanding of Kubernetes networking concepts, including pod networking, services, ingress, and egress configurations. Experience with CNI (Container Network Interface) plugins such as Calico, Flannel, or Cilium for secure, scalable network policies within Kubernetes clusters
- Azure Virtual WAN Hub: Expertise in configuring and managing Azure VWAN Hub, with hands-on experience in integrating it with Azure Firewall for secure, scalable, and efficient connectivity across different regions or hybrid cloud environments
- Strong understanding of Identity and Access management (IAM) and experience with tools like Okta, Azure AD, Ping Identity or Auth0
What the job involves
- Reporting to the Head of Platform Engineering, the Senior Cloud Engineer is responsible for driving the complete automation of our platform provisioning, configuration, and management. You will leverage tools such as Terraform, Azure, AKS, Kubernetes, Kustomize, Helm, Argo CD, and GitOps to spearhead the design, build, and automation of a highly available, scalable, secure, and reliable Cloud Infrastructure Platform based on Azure and Azure Kubernetes Services (AKS).
- Your role will support our mission to enable development teams to deliver high-quality software faster, more reliably, and securely. You will be a force multiplier in our team’s mandate to continuously improve and enhance the platform’s capabilities, ensuring it remains cutting-edge and highly efficient, continuously evolving to meet the needs of the organization and its users.
- This role requires operational expertise, customer focus, and the ability to work collaboratively with cross-functional teams to drive customer satisfaction
- Lead the design and implementation of a scalable, reliable, secure, and highly available Cloud Infrastructure Platform based on Azure and Azure Kubernetes Service (AKS)
- Drive the complete automation of platform provisioning, configuration, and management using tools like Terraform and Argo CD
- Automate Infrastructure Provisioning with Terraform: Design and manage cloud infrastructure using Terraform to implement infrastructure as code (IaC), utilizing Terraform modules to ensure modular, reusable, and maintainable configurations for consistent, repeatable deployments
- Develop automated workflows with CI/CD pipelines to streamline and accelerate software delivery, eliminating any manual interventions
- Design and maintain GitOps workflows using tools such as Argo CD to automate the deployment and management of infrastructure and applications, ensuring seamless integration with Kubernetes clusters. Use GitOps principles to automatically detect and correct configuration drifts, ensuring that the actual state of the system always matches the desired state
- Implement self-healing and auto-scaling mechanisms to enhance platform resilience and performance
- Drive Continuous Improvement and Enhancement: Lead initiatives to continuously improve and enhance the platform by identifying inefficiencies, implementing automation, eliminating any manual toil, adopting new technologies, and optimizing existing processes to ensure higher reliability, performance, and scalability
- Collaborate closely with the Cloud Operations team to facilitate a seamless handover of support and maintenance tasks. Deliver documentation, conduct necessary knowledge transfer sessions, and provide ongoing mentorship to enable the cloud operations team to take over operational tasks successfully
- Implement Observability for Applications and Infrastructure: Utilize Azure's suite of observability tools, including Azure Monitor, Application Insights, Log Analytics, and Azure Network Watcher, to monitor and alert on the performance and health of applications and infrastructure. Ensure comprehensive visibility into application health and performance, enabling proactive detection and resolution of issues. Set up alerts and dashboards to provide real-time insights and proactive notifications for infrastructure anomalies and performance degradation
- Deliver Self-service Documentation to ensure that development and operations teams can easily consume and support the platform independently. This will reduce dependency on the platform engineering team and facilitate the handover of operational responsibilities to the cloud operations team, equipping them with the necessary knowledge and tools to manage day-to-day operations effectively
- Provide L3 and L4 support to aid in the resolution of Cloud Platform-related Incidents
Our take
Zafin is a global provider of a range of digital transformation solutions for the banking sector, with a focus on relationship-based pricing solutions for enterprise grade financial institutions and banks. Clients include Canada’s big five, and further flung giants like the National Bank of Abu Dhabi.
The problem Zafin is solving is a big one for incumbent banking institutions: legacy frameworks and business practices are relatively cumbersome and byzantine in comparison to the nimbler, snappier challenger and neo banks. This means they’re losing out, particularly with the younger generations, who prefer convenience over institutional pedigree.
Zafin’s solution functions as a neat little workaround, allowing banks keen to digitally transform to dodge the hefty delays and sunk costs of retooling their systems from scratch. Banks globally are scrabbling to compete with their attractive, agile digital-first competitors, so Zafin won’t struggle to find customers. This is especially because it’s expanded to cater to neo-banks, too. With such a broad scope and a strong reputation of its own, Zafin is a confident, highly relevant company, which makes it no surprise that Nordic Capital bought it out in 2024. This acquisition will accelerate Zafin's growth and product development roadmap.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (2 rounds)
Jan 2019
$17m
LATE VC
Sep 2014
$15m
LATE VC
Total funding: $32m
Company benefits
- Flexible work arrangements - includes opportunities for hybrid work, flexible hours, flexible locations, and various types of paid leave
- Meaningful recognition - we truly value our team members’ contributions and ensure that their achievements are properly recognized and rewarded through areas such as incentive opportunities
- Ownership - we offer a stock option plan that is exclusively for employees who share our sense of purpose and create value that keeps us on our A-game
Company values
- Zealous: We are allergic to complacency. Each of us acts with energy and enthusiasm to maximize the positive impact we have on our customers, our colleagues and our company every single day.
- A-Game: We bring our personal best, always. We respond to what’s new with curiosity. We collaborate with others to discover the best possible solutions. And we keep our commitments
- Forward Thinking: Our company has always been ahead of what’s next. Our people see around corners, embrace change, challenge convention and work together to build a better world
- Inclusive: We respect, value and actively include others because diversity and inclusion result in broader perspectives, deeper insights, smarter decisions and more abundant creativity
- Nimble: We move quickly, reach for opportunity, take calculated risks and welcome feedback. This is how we achieve continuous innovation
Company HQ
Downtown Vancouver, Vancouver, BC
Articles
Leadership
Al Karim Somji
(Boardmember & Co-Founder)Previously the President of OpCom Solutions, then CEO of Eftia OSS Solutions.
Anugopal Venugopalan
(COO & Co-Founder)Began his career as a Product Manager at Fujitsu ICIM, before moving on to serve as the Director of Pre-Sales at Eftia OSS Solutions.
Dinesh Krishnan
(Chief Commercial Officer & Co-Founder)Previously in management at SBI Capital Markets, before moving on to serve as Vice President of DSP Merrill Lynch.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 7 more jobs at Zafin