Senior Software Engineer - Cloud Access (Python, Golang, AWS, GCP)

About the role

As a Senior Software Engineer on the Cloud Access team, you'll be at the forefront of transforming how Canva engineers interact with cloud infrastructure. You'll design and build platforms that abstract away access complexity while maintaining security and compliance, directly impacting the productivity of our entire engineering organisation. The Cloud Access team's vision is to enable every Canva engineer to perform their work in the Cloud securely and efficiently without direct production access. We're transforming from a reactive permission-granting function to a proactive platform that enables secure, automated cloud operations. Our mission centres on developing and maintaining platforms and policies for secure, least-privilege access to cloud resources and services. We provide self-service experiences while ensuring auditable and compliant access, working closely with Security teams to maintain clear boundaries and responsibilities. By 2026, we aim to embed zero-production access principles into common workflows, ensuring engineers can accomplish their operational tasks through safe, automated abstractions rather than direct system access. What's in it for you? Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a range of benefits to set you up for every success in and outside of work. Here's a taste of what's on offer: Equity packages - we want our success to be yours too Inclusive parental leave policy that supports all parents & carers An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more Flexible leave options that empower you to be a force for good, take time to re

Benefits

Additional Information

Join the team redefining how the world experiences design. Hey, g'day, mabuhay, kia ora, 你好, hallo, vítejte! Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point. Where and how you can work Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals. What you'd be doing in this role As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve. At the moment, this role is focused on: Designing, implementing and maintaining platforms and automations that enable secure, auditable access to cloud resources without requiring direct production access Developing infrastructure solutions with scalability, high-availability, and security as primary design principles Being a subject matter expert in cloud security patterns, IAM, and least-privilege access models across AWS (GCP experience desirable) Collaborating with engineering teams across Canva to understand their operational needs and build appropriate abstractions Participating in architecture reviews, solution design meetings, hiring interviews, and code reviews Driving improvements to operational excellence through automation, monitoring, and incident response practices Contributing to infrastructure-as-code best practices using Terraform and other IaC tools Proposing and implementing new approaches to ensure we future-proof Canva's access control systems as we continue scaling globally Sharing on-call responsibilities and maintain the health of critical infrastructure services You're probably a match if: You have 5+ years of hands-on experience designing, maintaining, and automating cloud infrastructure (AWS or GCP, preferably both) You have strong experience with the Python and Go programming languages You have knowledge of security best practices in cloud environments, including IAM, least-privilege principles, and secure architecture patterns You have container experience deploying and managing containerised workloads in cloud environments (experience with Kubernetes as a container orchestration platform is preferred) You have systems thinking ability to design solutions considering scale, reliability, and security trade-offs You have strong communication skills to explain complex technical concepts to diverse stakeholders Infrastructure as Code expertise with Terraform (preferred), CloudFormation, or similar tools It's nice to have the following experience as well. Experience with operating HashiCorp Vault and/or Teleport Background in compliance frameworks (SOC2, SOX, ISO27001) Experience building developer platforms or internal tools at scale Knowledge of multi-cloud architectures and cloud-agnostic design patterns Track record of leading technical initiatives that span stakeholders within multiple teams

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at Canva? Share your experience