Senior DevOps Engineer

Who we are

You might know us as the inventors of the bath bomb, but there's more to this great-smelling, partly employee-owned, family-run company than pioneering cosmetics. We believe our business should put more back into the world than it takes and demonstrate that capitalism can be a force for good. We put our people first and fight cruel practices like animal testing, promote regeneration, and show that it is what's inside that counts - whether that's an ingredient in a product, or the minerals in a smartphone.

LUSH Digital offers a range of exciting online and in store experiences for our customers. Developers of many disciplines are responsible for creating and developing new innovations in technology, as well as providing and maintaining a global digital estate across multiple platforms and devices.

We love open source! The Cloud Native Computing Foundation is always our first port of call when a requirement for a new tool comes up. Whenever we can, the code we produce is made public for all to use.

Overview:

As a Senior DevOps Engineer, you will join a collaborative team dedicated to evolving our global digital infrastructure. Your focus will be on building and refining the tools that empower our engineering team to reliably deploy, monitor, and scale their applications.

A key strategic priority for LUSH Digital is our transition away from big-tech reliance; you will play a pivotal role in this journey by researching, scoping, and implementing open-source solutions that enhance our independence and development velocity. We are looking for a proactive engineer passionate about automation, reliability, and modern cloud-native practices to help shape the future of our platform.

You can find out more about Lush Digital here - https://weare.lush.com/lush-life/our-company/we-are-digital/

Reporting to the Senior Backend Engineering Manager, the Senior DevOps Engineer undertakes the following RESPONSIBILITIES:

Design and maintain scalable global digital infrastructure to ensure high availability and minimal downtime.

Implement and manage Infrastructure as Code (IaC) solutions, primarily using Terraform, to automate cloud provisioning.

Orchestrate and manage containerized applications using Docker/Podman, Kubernetes, and Helm.

Develop, maintain, and optimize CI/CD pipelines using GitLab CI/CD and ArgoCD, including custom in-house tooling.

Deploy, configure, and refine observability stacks (Loki, Prometheus, Grafana) to ensure deep insights into application performance.

Configure and manage Cloudflare services, including proxying, geo-aware load balancing, and workers.

Collaborate with engineering teams to support the Software Development Life Cycle (SDLC) and enforce effective branching patterns.

Uphold security best practices across all infrastructure and deployment processes.

Provide on-call support for global production environments during emergency scenarios.

You bring the following QUALIFICATIONS:

5+ years of experience in DevOps or a related technical role.

Strong programming and scripting proficiency in Golang, with an understanding of OOP concepts (familiarity with Python and TypeScript is a plus).

Proven experience in architectural design for distributed systems.

Solid experience with Infrastructure as Code (Terraform) and container orchestration (Kubernetes, Helm).

Deep understanding of CI/CD pipelines and observability tools (Loki, Prometheus, Grafana).

Familiarity with Google Cloud Platform (GCP) or other major cloud providers.

Working knowledge of networking, web protocols, and Bash scripting.

Experience with database technologies such as MySQL and Postgres.

Ability to support a global, 24/7 production environment with a focus on security and reliability.

We thank all interested applicants; however, only qualified candidates will be contacted.

We're 10% Employee Owned - all colleagues play a role in protecting our ethics and our independence, contributing ideas for the future and sharing in the rewards of success when the company is doing well.

#LI-IS1 #LI-Hybrid

Job Type: Full-time, Permanent role.

Work Type: Hybrid role, must have flexibility to go on-site 1-2 days/week.

Office Location: 35 Jutland Road, Etobicoke, Ontario, M8Z 2G6

Job Location: The successful candidate must be located in or around Toronto, ON.

Recruitment Process Overview:

We Are Lush

YouTube

LinkedIn

Find our Personal Privacy Policy details here.

Lush Handmade Cosmetics participates in E-Verify in certain US states including AL, GA, NC, SC, FL, AZ, UT, TN and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the United States.

Lush Cosmetics North America respectfully recognizes that our business operates on Indigenous territory across Turtle Island. As a business headquartered in Canada, our largest facilities are located on the unceded territories of the Musqueam, Squamish and Tsleil-Waututh, as well as here on the lands of the Mississaugas of the Credit, Anishnabeg, Chippewa, Haudenosaunee and Wendat, and now home to many diverse First Nations, Inuit and Métis peoples.

Our commitment to reconciliation and decolonization is guided by the Truth and Reconciliation Commission of Canada: Calls to Action #92. We recognize that our facilities, along with our settler and newcomer staff are guests on this land and as we act to repair past harm, we do it together in ally ship with Indigenous People everywhere, including staff, customers and with leadership from organizations and communities we work with.