Maarut - 19 emplois
East York, ON
Posté hier
Détails de l'emploi :
Temps plein
Exécutif
- Production stand-up (early in the engagement).
- Create the production AWS account in the Canadian region (ca-central-1), organizationally separate from staging, with Organization-level federation. This requires AWS Organization administrator credentials Parx alone cannot exercise
- Apply the Parx-built Terraform modules to the production account: baseline service-control policies (data residency, root denial, multi-factor authentication, public-S3 denial, security-service denial), customer-managed KMS keys, least-privilege IAM roles, CloudWatch alarms and log shipping, S3 with seven-year Object Lock retention, AWS Secrets Manager with rotation lambdas
- Activate the CI/CD production pipeline with environment-gated deploys (manual approval required for production)
- Production deployment of the signed-receipt KMS asymmetric migration (already validated in dev and staging)
- Production deployment of the operational key-custody infrastructure (already validated in dev and staging): rotating service keys for the application layer, validator keys for the permissioned blockchain nodes, and privacy keys for the private-transaction layer
- Validate the Parx-drafted production runbooks against the live environment; revise where production behaviour differs from staging
- Live vendor cutover (sequenced through the active window).
- (KYC) - swap the Parx-built adapter from mock mode to live Persona sandbox credentials in dev and staging, then production cutover
- Comply Advantage (sanctions, politically-exposed-person, adverse-media screening) - same pattern, sandbox then production
- Balance Custody (qualified custodian, multi-party-computation 2-of-3 architecture) - testnet integration (target end of June 2026); production cutover at the production key ceremony
- Production cutover and hyper-care (S-anchored).
Partager un emploi :
Foire aux questions
This position is based in East York, ON.
This is a full-time position.
Salary is listed as N/A – N/A in the posting.
Responsibilities include creating the production AWS account in ca-central-1, applying Terraform modules for baseline security and IAM, enabling the CI/CD production pipeline with manual approval, and deploying production-specific cryptographic and key-management components.
Yes, the role includes production cutover and hyper-care (S-anchored) activities, as well as live vendor cutover and environment validation against production.
The project covers development, staging, and production environments, with sandbox-to-production patterns for integrations like KYC and compliance screening.
The role uses AWS (organization setup, KMS keys, IAM, CloudWatch, S3 with Object Lock), Secrets Manager rotation, and Parx Terraform modules for policy and security controls.
