Description Our Team and What We’ll Accomplish Together   We are Canada’s largest healthcare IT provider and we’re transforming healthcare. The TELUS Health Cloud Platform team is passionate about solving complex problems to make life simpler for patients, clinicians, and the teams that serve them. We’re building secure, cloud-native platforms at scale across GCP, AWS, and Azure — and we take pride in doing it right.   We are building toward an agentic-first operating model. AI agents — not humans — handle the routine: provisioning infrastructure, responding to requests, enforcing guardrails, and guiding teams through self-service workflows. Security is built into everything we do, not bolted on at the end. Our engineers focus on building and improving those agents and systems, not executing manual tasks. We’re looking for a leader who gets this shift and knows how to drive it.   As Manager, Cloud Platform, you will lead both our platform engineering and cloud operations functions. Platform self-service is our north star, and agentic workflows are how we get there. Your mandate is to build the systems — agents, golden paths, automation frameworks, and security guardrails — that allow product and engineering teams to interact with the cloud platform entirely through AI-driven interfaces, without ever needing to file a ticket or wait for a human handoff.   Security is a first-class concern for this role. You will own the security posture of the platform layer — ensuring identity, access, and compliance controls are enforced automatically through code and agents, not manual review. This is a dual mandate: build the agentic platform that eliminates operational toil, while ensuring the platform remains secure, compliant, and trusted by the organization.What You’ll Do Build the Agentic-First Platform  

Design and lead the build-out of an agentic platform operating model — where AI agents (Claude, GitHub Copilot, and custom agents) are the primary interface between product teams and cloud infrastructure

Replace manual ticketing workflows with agent-driven request handling: developers describe what they need in natural language or via CLI, and agents generate, validate, and apply the required Terraform or configuration changes

Build agent workflows that guide product teams through infrastructure onboarding, access requests, environment bootstrapping, and compliance checks — without requiring Cloud Platform team intervention

Establish GitHub as the operational backbone: issues, PRs, documentation, and agent interactions all flow through a GitHub-native model

Instrument agents with awareness of platform standards, security guardrails, and organizational context — so they enforce policy automatically rather than escalating to humans

Define and communicate the agentic roadmap to senior leadership, engineering teams, and product stakeholders

  Own Platform Security & Compliance  

Own the security posture of the cloud platform layer — ensuring identity, access, and network controls are implemented consistently and enforced through automation across GCP, AWS, and Azure

Implement and maintain security guardrails at the organization and pipeline levels, ensuring all infrastructure provisioned through the platform meets baseline security and compliance requirements

Lead IAM governance: role binding, access provisioning, key rotation, service account hygiene, and Workload Identity Federation — with a goal of automating these controls through agents and policy-as-code

Partner with the Security team to ensure platform capabilities align with organizational security standards and support audit requirements (SOC 2, PIPEDA, HIPAA-aligned practices)

Build security into the self-service golden paths — so that teams provisioning infrastructure through approved patterns inherit secure defaults automatically

Treat security findings as engineering problems: prioritize remediation through code, automation, and agent enforcement rather than manual review cycles

Own the Self-Service Platform & Golden Paths

Design opinionated “golden path” frameworks using Terraform, Terragrunt, and GitHub Actions that standardize and secure infrastructure patterns across GCP, AWS, and Azure

Build and maintain a centralized module marketplace and IaC library that teams and agents can consume confidently

Ensure all self-service capabilities are agent-accessible — designed for both human and programmatic consumption from day one

Establish clear support boundaries: teams using the golden path get full support; non-standard configurations are self-supported

  Lead Cloud Operations  

Ensure operational coverage across the multi-cloud estate: GCP, AWS, and Azure

Lead incident management with a focus on durable remediation — every significant incident produces agent runbooks, automation, or documentation that prevents recurrence

Drive down request volume through agentic self-service, not headcount scaling — treating high ticket volume as an engineering problem to be automated away

Coordinate with the SRE and observability teams to ensure platform services meet reliability expectations and incidents are routed and resolved efficiently

Drive Engineering Excellence

Build and maintain CI/CD pipelines and Infrastructure-as-Code to automate provisioning, configuration management, patching, and compliance enforcement

Contribute to the golden image factory initiative — ensuring CIS-hardened, patched base images are available on-demand across all cloud platforms

Champion a “security as code” mindset across the team — policy enforcement, compliance checks, and access controls are implemented in pipelines and agents, not spreadsheets

  Lead, Coach & Develop Your Team  

Manage a blended team of platform engineers and cloud operations engineers, with a deliberate focus on growing agent-building, automation, and security engineering skills

Hire for engineers who are energized by building AI-driven, security-first systems — not just operating existing ones

Foster a learning culture — create space for the team to grow in agentic development, cloud security, certifications, and IaC alongside day-to-day responsibilities

Help shape and evolve team ceremonies and ways of working and contributing to how the team structures its delivery cadence, retrospectives, and planning without being the sole driver of execution

  Collaborate Across the Organization  

Partner with Product, Engineering, Security, and Architecture teams to align platform and agentic capabilities with organizational priorities

Serve as the internal champion for agentic workflows — helping product and engineering teams understand how to interact with the platform through agents rather than manual processes

Report on platform adoption, agent utilization, security posture, and toil-reduction progress to senior leadership

Qualifications What You’ll Need   Leadership & Mindset  

5+ years of progressive experience in cloud platform engineering or cloud operations — with at least 2 years in a people management or technical leadership role

A genuine belief in agentic-first, security-first workflows and a track record of building automation that replaces manual processes — not just augments them

Experience leading teams through transformation: from reactive, ticket-driven operations toward proactive, agent-driven platform delivery

Strong communication skills — able to translate platform complexity into clear narratives for executive leadership and business stakeholders

Comfortable operating in ambiguity and driving change in an environment that is still evolving

  Technical Depth  

Hands-on experience across at least two of GCP, AWS, and Azure — with a solid grasp of identity, networking, compute, and security controls at scale

Deep expertise in Infrastructure-as-Code (Terraform, Terragrunt) and the ability to design secure, reusable, opinionated module libraries

Experience building or working with AI agents and agentic workflows — including prompt engineering, tool use, and integrating agents with CI/CD systems and infrastructure APIs

Strong understanding of cloud security fundamentals: IAM, RBAC, service accounts, Workload Identity Federation, network security, and secrets management

Experience implementing policy-as-code and automated compliance enforcement in multi-cloud environments

Proficiency in at least one scripting/programming language (Python, Go, Bash) — you write code, not just YAML

Experience building developer-facing self-service platforms, including CLI tools, GitHub Actions workflows, and chat-based interfaces

  Operational Excellence  

Proven track record of reducing operational toil through automation — with concrete examples of what you built and how it measurably reduced burden

Experience managing incident response at scale, including post-mortem facilitation and follow-through on action items

Familiarity with request and workflow management practices — and an instinct for treating high request volume as an engineering problem to be automated away

Understanding of security and compliance requirements in regulated healthcare environments (SOC 2, HIPAA-aligned practices, PIPEDA)

Education & Certifications

Bachelor’s degree in Computer Science, Engineering, or a related technical field — or equivalent practical experience

Cloud Certifications (Required — at least one): AWS Solutions Architect (Associate or Professional), GCP Professional Cloud DevOps Engineer, or Azure Administrator Associate

Cloud Certifications (Preferred — additional): GCP Professional Cloud Architect, AWS DevOps Engineer Professional, Azure DevOps Engineer Expert

DevOps / Platform: CKA (Certified Kubernetes Administrator) or equivalent practitioner-level credential is a strong asset

  Nice-to-haves  

Experience designing or operating agentic systems in a production engineering context — including LLM tool use, agent orchestration, or AI-driven workflow automation

Familiarity with GitHub Copilot, Claude, or similar AI coding/operations tools in an enterprise setting

Experience with cloud security posture management (CSPM) tooling and integrating security findings into automated remediation workflows

Experience supporting large-scale infrastructure modernization or cloud adoption programs

Experience with identity federation and SSO administration across multi-cloud environments

Background in regulated healthcare IT — understanding of patient-facing or clinical systems

Experience with FinOps principles and cloud cost attribution

Familiarity with enterprise collaboration and development tooling as both a user and administrator

  Advanced knowledge of English is required because you will most of the time interact in English with internal parties (colleagues, internal partners, stakeholders, etc.); and work with IT tools whose interface is only accessible in English as part of this position's main responsibilities given its national scope.   #LI-REMOTE