Developer II

As the largest Canadian-owned and operated K-12 publisher, Nelson Education Ltd. is Canada's only heritage education content provider, known for its innovative products and solutions catering to learners across the country.

Nelson is on a mission to make learning accessible, engaging, and effective for all. That's why Nelson continuously strives to create dynamic curriculum-aligned content that caters to diverse learning styles, fostering critical thinking, creativity, and life-long learning.

In response to the evolving education landscape, Nelson developed Edwin, a digital learning ecosystem. Edwin is a learning platform for classroom success, providing curriculum-linked content, engaging tools and unparalleled support to reach every student.

Nelson is redefining education and making a positive impact on the way knowledge is acquired and shared by creating the possible, one learner at a time.

Reporting to the Team Lead, the Developer II (Infrastructure & Security) is responsible for designing, securing, and operating the platform infrastructure that supports internal applications, services, and data pipelines. The person in this position leads on cloud infrastructure, Kubernetes-based environments, CI/CD platform reliability, observability, and secure systems engineering — while contributing to application-layer development where needed to support operational ownership of services.

This role combines software development with Dev Ops-oriented responsibilities, including CI/CD, observability, Kubernetes-based deployments, logging, monitoring, and operational support.

Key Accountabilities

• Design, provision, and maintain cloud infrastructure, Kubernetes environments, networking, and platform services using infrastructure-as-code tools (Terraform, Helm).
• Own and operate CI/CD pipelines, automated build and deployment workflows, and release processes with a focus on reliability, security, and repeatability.
• Lead the configuration, deployment, and monitoring of containerized applications in Kubernetes, including manifests, Helm charts, ingress, services, secrets, and config maps.
• Build and maintain observability infrastructure using Elastic Stack / ELK — including logging pipelines, dashboards, alerting, and log-based troubleshooting workflows.
• Drive application performance monitoring, alerting, and production-readiness practices across owned services.
• Lead secure software development practices: secrets management (Vault, AWS Secrets Manager, sealed secrets), access control, environment configuration, and dependency/vulnerability scanning (SCA, SAST, DAST).
• Apply and enforce secure coding standards for common risks (OWASP Top 10), including input validation, authentication and authorization (OAuth, JWT, RBAC), and safe handling of sensitive data.
• Participate in security reviews, threat modelling discussions, and remediation of identified vulnerabilities.
• Support compliance engineering efforts related to frameworks such as SOC 2, ISO 27001, PCI, or HIPAA — including evidence collection, control implementation, and audit readiness.
• Manage database operations: schema migrations, indexing, performance tuning, backup, and disaster recovery.
• Lead incident response, on-call rotations, and post-incident reviews for production issues.
• Maintain infrastructure-as-code, environment hygiene, and operational runbooks for owned services.
• Contribute to backend application development (APIs, services, data pipelines) to support full operational ownership of platform components.
• Participate in code reviews with a security and reliability lens, and contribute to shared engineering standards.
• Stay current with cloud-native infrastructure, Dev Sec Ops  practices, and platform engineering tooling.
• Actively participate in the SCRUM process.

Requirements

Must have

• 5+ years of hands-on experience with several of the following:
• Cloud infrastructure on at least one major provider (AWS, Azure, or GCP), including networking fundamentals (DNS, TLS, load balancers, ingress)
• Kubernetes: deploying, operating, and troubleshooting applications in Kubernetes-based environments
• Infrastructure-as-code tools such as Terraform, Helm, or similar
• CI/CD pipelines, automated builds, and deployment workflows
• Elastic Stack / ELK:
  Elasticsearch, Logstash, Kibana, and related observability tooling
• Secrets management (Vault, AWS Secrets Manager, sealed secrets) and dependency/vulnerability scanning
• Secure software development practices: OWASP Top 10, OAuth, JWT, RBAC
• Docker and containerization
• Application logging, monitoring, alerting, and production troubleshooting
• Database operations: schema migrations, indexing, and basic performance tuning
• Linux/shell fluency and comfort with on-call or production support responsibilities
• Experience with compliance frameworks (SOC 2, ISO 27001, PCI, HIPAA) and the engineering practices required to support them
• Experience with backup, disaster recovery, and cost/capacity awareness in cloud environments
• Backend development experience…