Hiring: Senior DevOps and Cloud Engineer
Location: Toronto, Ontario, Onsite (5 days per week in office)
Duration: November 23, 2026 – May 20, 2027
Hourly Rate: $80/hour - $105/hour (based on experience)
Client: Public Sector - Healthcare
Responsibilities:
- Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.
- Design and maintain GitHub Actions workflows that build, test, scan, package, provision, deploy, promote, and roll back OCRE application and infrastructure changes across controlled environments.
- Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure, configuration, permissions, monitoring, and deployment dependencies.
- Provision and configure AWS Glue jobs, connections, triggers, roles, encryption settings, and network access, and troubleshoot ENI creation, subnet capacity, DNS, routing, security-group, NAT, and VPC-endpoint issues.
- Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances, endpoints, subnet groups, tasks, table mappings, logging, monitoring, and connectivity.
- Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancers, target groups, logs, and resource limits.
- Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies, security headers, access controls, and deployment invalidations.
- Design and maintain VPC networking, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, DNS resolution, and connectivity between OCRE workloads and dependent services.
- Create and maintain least-privilege IAM roles and policies, AWS KMS keys and key policies, encryption controls, secrets integration, and service permissions required by OCRE workloads and pipelines.
- Manage and troubleshoot EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies, lifecycle behaviour, health checks, patching, and replacement failures.
- Implement CloudWatch logs, metrics, dashboards, alarms, deployment evidence, operational diagnostics, and incident-response procedures for cloud infrastructure and application platforms.
- Prepare infrastructure designs, CDK documentation, pipeline documentation, network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.
Deliverables:
- Reusable GitHub Actions workflows for build, test, scanning, packaging, infrastructure provisioning, application deployment, environment promotion, approval, and rollback.
- Javascript/python AWS CDK applications, stacks, constructs, tests, configuration, and deployment assets that define the assigned OCRE cloud infrastructure.
- AWS Glue job, connection, trigger, IAM, encryption, and networking infrastructure, together with validated private connectivity to required data sources and targets.
- Amazon Data Firehose and AWS DMS infrastructure, including endpoints, subnet groups, tasks, mappings, delivery configuration, logging, monitoring, and operational documentation.
- Amazon ECS on AWS Fargate infrastructure and deployment assets, including Amazon ECR integration, task definitions, services, scaling, load balancing, secrets, health checks, logging, and troubleshooting procedures.
- Serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS, cache and response-header policies, access controls, and deployment invalidation support.
- VPC, subnet, routing, NAT, endpoint, DNS, security-group, IAM, AWS KMS, encryption, and secrets-integration components required by assigned OCRE workloads.
- EC2 launch templates and Auto Scaling group configurations, scaling and health policies, bootstrap or patching procedures, monitoring, and failure-recovery documentation.
- CloudWatch logs, metrics, dashboards, alarms, deployment records, infrastructure tests, validation evidence, incident diagnostics, and operational runbooks.
- Technical designs, infrastructure diagrams, security and network configuration records, release documentation, defect fixes, demonstrations, production support, and knowledge-transfer materials.
Must Haves:
- GitHub Actions and Javascript/python AWS CDK experience, including secure AWS authentication, reusable delivery workflows, infrastructure testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
- Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.
- AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.
- Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support
- Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
- Strong hands-on experience developing AWS CDK infrastructure in Javascript and python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
- Strong experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR, including task definitions, services, load balancing, scaling, logging, health checks, and container troubleshooting.
- Strong AWS networking and security experience covering VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, AWS KMS keys, and AWS Glue job networking.
- Hands-on experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
Desired Skills:
- Experience using GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
- Experience with Java build tooling, javascript build tooling, AWS CDK unit tests, infrastructure policy validation, cdk diff review, CloudFormation change sets, drift detection, and multi-environment configuration.
- Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
- Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.
We appreciate all interest; however, only candidates whose experience fully meets the posted requirements will be considered.
Interested?
If you meet the above criteria apply now!
**AI is not being used in the application/recruitment process for this position**
