Find similar career opportunities
Cloud Architecture and DevOps Lead - Telco Private Cloud Category: Software Development/ Engineering
Main location: Canada, Ontario, Toronto
Position ID:J1026-2254
Employment Type: Full Time
Position Description: We are seeking an experienced Cloud Architecture and DevOps Lead to design and deliver a telecom grade private cloud platform. The role will lead the migration from VMware based infrastructure to a Kubernetes based private cloud and support the onboarding of containerized network functions, 5G Standalone Core, Ericsson ADI, and Rakuten Open RAN workloads.
The successful candidate will work across cloud architecture, Kubernetes, DevOps, networking, security, automation, and telecom platforms to establish a scalable, secure, and operationally efficient environment.
Your future duties and responsibilities: Key Responsibilities
Private Cloud and Kubernetes Architecture
. Define the target architecture for migrating VMware workloads to a Kubernetes based private cloud.
. Develop migration strategies for virtual machines, applications, and network functions.
. Design highly available Kubernetes clusters across data centres and edge locations.
. Define standards for compute, storage, networking, observability, backup, disaster recovery, and lifecycle management.
. Establish cloud native patterns for VM, container, and CNF workloads.
. Support virtualization technologies such as KubeVirt where VM workloads must continue to run on Kubernetes.
Containerization and CNF Modernization
. Lead the containerization and modernization of legacy applications and telecom network functions.
. Support onboarding, deployment, scaling, upgrades, and lifecycle management of containerized network functions.
. Define Helm, GitOps, CI/CD, image management, and configuration standards.
. Implement automated testing, release management, rollback, and version control.
. Ensure workloads meet telecom grade requirements for performance, resiliency, latency, and availability.
DevOps and Automation
. Establish DevOps and GitOps practices across infrastructure, platform, and network function delivery.
. Build automated pipelines for infrastructure provisioning, application deployment, configuration, testing, and operational changes.
. Implement Infrastructure as Code using tools such as Terraform, Ansible, and related automation frameworks.
. Integrate source control, CI/CD, security scanning, artifact repositories, and change management.
. Improve deployment frequency, operational consistency, and time to recover from failures.
Security Architecture
. Embed security into the private cloud and DevOps lifecycle.
. Define identity, access control, secrets management, certificate management, and privileged access controls.
. Implement container, image, Kubernetes, API, and supply chain security.
. Support zero trust principles, network segmentation, micro segmentation, and workload isolation.
. Establish security monitoring, vulnerability management, audit logging, compliance controls, and incident response integration.
. Collaborate with enterprise security teams to meet telecom and regulatory requirements.
Network Architecture and Integration
. Design Kubernetes networking for telecom workloads, including CNI, multus networking, service meshes, ingress, load balancing, and IP management.
. Support integration with data centre, transport, firewall, DNS, IPAM, SDN, and service assurance platforms.
. Define network performance requirements for low latency, high throughput, resiliency, and deterministic behavior.
. Support connectivity between private cloud, enterprise networks, edge locations, and telecom infrastructure.
. Develop network automation for provisioning, configuration, validation, and operational support.
Telecom Platform Onboarding
. Lead the onboarding of Ericsson ADI stack components into the private cloud environment.
. Support the deployment and integration of 5G Standalone Core network functions, including AMF, SMF, UPF, UDM, AUSF, PCF, NRF, and related services.
. Support onboarding of Rakuten Open RAN components and associated RAN, cloud, transport, and orchestration platforms.
. Validate interoperability across RAN, transport, 5G Core, OSS/BSS, inventory, orchestration, and assurance systems.
. Ensure platform designs support telecom standards, CNF lifecycle management, observability, and operational handover.
Observability and Operations
. Define observability standards for infrastructure, Kubernetes, applications, CNFs, and network services.
. Implement centralized monitoring, logging, tracing, event management, and dashboarding.
. Support integration with tools such as Prometheus, Grafana, Elastic/Kibana, Splunk, Dynatrace, or equivalent platforms.
. Establish service level indicators, service level objectives, capacity monitoring, and operational health checks.
. Enable automated fault detection, remediation, and closed loop operational processes.
Required qualifications to be successful in this role: Required Experience
. 10+ years of experience in cloud architecture, DevOps, infrastructure, or telecom engineering.
. Strong experience designing and operating Kubernetes based private cloud platforms.
. Proven experience migrating VMware workloads to Kubernetes or cloud native platforms.
. Hands on experience with containerization, Docker/OCI, Helm, Kubernetes, and CNF deployments.
. Experience with CI/CD, GitOps, Infrastructure as Code, Terraform, Ansible, and automated testing.
. Strong knowledge of cloud and telecom networking, including IP, DNS, load balancing, firewalls, SDN, CNI, and network segmentation.
. Experience implementing cloud and container security controls.
. Experience supporting 4G/5G Core, 5G Standalone, IMS, RAN, Open RAN, or telecom cloud platforms.
. Experience with Ericsson platforms, Rakuten/Open RAN, or comparable telecom vendors is highly desirable.
. Experience with telecom grade availability, disaster recovery, performance, and lifecycle management.
Preferred Technical Skills
. Kubernetes, OpenShift, Rancher, VMware Tanzu, or equivalent platforms
. KubeVirt or other VM on Kubernetes technologies
. Docker, containerd, CRI O, Helm, Operators, and CNF orchestration
. Terraform, Ansible, Argo CD, GitLab CI/CD, Jenkins, or equivalent
. Linux, Python, Bash, and API based automation
. Multus, Calico, Cilium, SR IOV, DPDK, and Kubernetes networking
. Ericsson 5G Core, ADI, Cloud RAN, or related platforms
. Rakuten Open RAN and cloud native RAN components
. Prometheus, Grafana, Elastic/Kibana, Dynatrace, or equivalent observability tools
. TM Forum, 3GPP, ETSI, and telecom cloud standards
Key Deliverables
. Target state private cloud and Kubernetes architecture
. VMware to Kubernetes migration roadmap
. Containerization and CNF onboarding framework
. Security and network architecture
. DevOps, CI/CD, GitOps, and Infrastructure as Code framework
. Ericsson ADI and 5G SA Core onboarding plan
. Rakuten Open RAN integration and deployment plan
. Observability and operational support model
. Platform performance, resiliency, and disaster recovery strategy
. Documentation, standards, runbooks, and knowledge transfer materials
Success Measures
. Successful migration of priority VMware workloads to the private cloud
. Secure and repeatable onboarding of containerized network functions
. Operational readiness of Ericsson ADI, 5G SA Core, and Rakuten Open RAN platforms
. Improved deployment speed, automation, and service reliability
. Reduced manual operational effort and configuration errors
. Demonstrated security, resiliency, observability, and lifecycle management capabilities
CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $115,000-$165,000. This role is an existing vacancy.
#LI-RD12
Use of the term 'architect' in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT architect-related functions, but licensure from an architect regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.
Skills: - Cloud architecture
- DevOps
- English
- Infrastructure architecture
- Kubernetes
- Security Architecture
- Telecommunications
