What You'd Be Doing In This Role
At the moment, this role is focused on:
* Designing, implementing and maintaining platforms and automations that enable secure, auditable access to cloud resources without requiring direct production access
* Developing infrastructure solutions with scalability, high-availability, and security as primary design principles
* Building and deepening your expertise in cloud security patterns, IAM, and least-privilege access models across AWS (GCP experience desirable)
* Collaborating with engineering teams across Canva to understand their operational needs and build appropriate abstractions
* Participating in architecture reviews, solution design meetings, hiring interviews, and code reviews
* Driving improvements to operational excellence through automation, monitoring, and incident response practices
* Contributing to infrastructure-as-code best practices using Terraform and other IaC tools
* Proposing and implementing new approaches to ensure we future‐proof Canva's access control systems as we continue scaling globally
* Sharing on‐call responsibilities and maintain the health of critical infrastructure services
You're probably a match if:
* You have strong coding proficiency in Golang or Python
* You have meaningful experience designing, maintaining, and automating cloud infrastructure (AWS or GCP) — whether that's a few years of intensive hands‐on work or a longer career with relevant exposure
* You have experience with Infrastructure as Code (IaC) tools like Terraform (preferred), CloudFormation, or similar
* You have an interest in cloud security and access control patterns — you don't need to be an IAM specialist on day one, but you're keen to build deep expertise in this space
* You have exposure to deploying and managing containerized workloads in cloud environments (Kubernetes experience is a plus)
* You have systems thinking ability to design solutions considering scale, reliability, and security trade-offs
* You have strong communication skills to explain complex technical concepts to diverse stakeholders
About The Group
Canva's Core Infrastructure group builds and operates the foundational platforms that let Canva engineers ship reliably at global scale. Our mission is "To reduce the complexity burden of using the Cloud," which we achieve through a combination of self‐service platforms, robust standards, and comprehensive developer documentation. The group focuses on secure, cost‐efficient infrastructure that spans compute and networking primitives, while providing guardrails for compliant, low‐friction access to production systems.
We're responsible for Canva's entire cloud foundation across AWS and GCP, from the Kubernetes‐based compute platform that runs workloads securely and efficiently "anywhere", to the ubiquitous networking infrastructure that underpins all service connectivity. Our work includes building centralized access platforms that unify permissions and production operations, developing platform enablement tools, and managing organizational foundations including account provisioning and core service operations. Everything we create frees engineers from worrying about infrastructure complexity, allowing them to focus on producing their best work.
About The Team
The Cloud Access team enables Canva engineers to work in the Cloud securely and efficiently by shifting from reactive permission‐granting to a proactive, automated platform. In partnership with Security, the team develops self‐service platforms and least‐privilege policies that ensure compliant, auditable access. By 2026/7, the goal is to fully embed these secure principles into common workflows, allowing engineers to accomplish their operational tasks through safe, automated abstractions.
What's in it for you?
* Equity packages - we want our success to be yours too
* Inclusive parental leave policy that supports all parents & carers
* An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
* Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally
#J-18808-Ljbffr