Senior Software Engineer - Cloud Access (Python, Golang, AWS, GCP)
Canva
Job Description
Join the team redefining how the world experiences design.
Hey, g'day, mabuhay, kia ora, 你好, hallo, vítejte!
Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.
Where and how you can work
Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work, we trust our Canvanauts to choose the balance that empowers them and their team to achieve their goals.
What you’d be doing in this role
As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.
At the moment, this role is focused on:
Designing, implementing and maintaining platforms and automations that enable secure, auditable access to cloud resources without requiring direct production access
Developing infrastructure solutions with scalability, high-availability, and security as primary design principles
Being a subject matter expert in cloud security patterns, IAM, and least-privilege access models across AWS (GCP experience desirable)
Collaborating with engineering teams across Canva to understand their operational needs and build appropriate abstractions
Participating in architecture reviews, solution design meetings, hiring interviews, and code reviews
Driving improvements to operational excellence through automation, monitoring, and incident response practices
Contributing to infrastructure-as-code best practices using Terraform and other IaC tools
Proposing and implementing new approaches to ensure we future-proof Canva's access control systems as we continue scaling globally
Sharing on-call responsibilities and maintain the health of critical infrastructure services
You're probably a match if:
You have 5+ years of hands-on experience designing, maintaining, and automating cloud infrastructure (AWS or GCP, preferably both)
You have strong experience with the Python and Go programming languages
You have knowledge of security best practices in cloud environments, including IAM, least-privilege principles, and secure architecture patterns
You have container experience deploying and managing containerised workloads in cloud environments (experience with Kubernetes as a container orchestration platform is preferred)
You have systems thinking ability to design solutions considering scale, reliability, and security trade-offs
You have strong communication skills to explain complex technical concepts to diverse stakeholders
Infrastructure as Code expertise with Terraform (preferred), CloudFormation, or similar tools
It’s nice to have the following experience as well.
Experience with operating HashiCorp Vault and/or Teleport
Background in compliance frameworks (SOC2, SOX, ISO27001)
Experience building developer platforms or internal tools at scale
Knowledge of multi-cloud architectures and cloud-agnostic design patterns
Track record of leading technical initiatives that span stakeholders within multiple teams
About the team
As a Senior Software Engineer on the Cloud Access team, you'll be at the forefront of transforming how Canva engineers interact with cloud infrastructure. You'll design and build platforms that abstract away access complexity while maintaining security and compliance, directly impacting the productivity of our entire engineering organisation.
The Cloud Access team's vision is to enable every Canva engineer to perform their work in the Cloud securely and efficiently without direct production access. We're transforming from a reactive permission-granting function to a proactive platform that enables secure, automated cloud operations.
Our mission centres on developing and maintaining platforms and policies for secure, least-privilege access to cloud resources and services. We provide self-service experiences while ensuring auditable and compliant access, working closely with Security teams to maintain clear boundaries and responsibilities. By 2026, we aim to embed zero-production access principles into common workflows, ensuring engineers can accomplish their operational tasks through safe, automated abstractions rather than direct system access.
What's in it for you?
Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a range of benefits to set you up for every success in and outside of work.
Here's a taste of what's on offer:
Equity packages - we want our success to be yours too
Inclusive parental leave policy that supports all parents & carers
An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally
Check out lifeatcanva.com for more info.
Other stuff to know
We see AI as a powerful amplifier of creativity and technology at Canva. We’re evolving how we assess AI skills in our Technology hiring experience - you’ll tackle interactive, real-time challenges that reflect the kind of work we do. In some interviews, you may also be asked to solve a problem using an AI tool to show how you approach challenges with tech by your side. Your recruitment partner will walk you through what to expect. We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture.
When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process. We celebrate all types of skills and backgrounds at Canva, so even if you don’t feel like your skills quite match what’s listed above - we still want to hear from you!
Please note that interviews are conducted virtually.