DevOps and Cloud Engineer - Senior

Job Title: DevOps/Cloud Engineer - Senior

Location: Toronto, Ontario

Work Model: Hybrid

Duration: 6 months

Extension: 1 Time

Project Description

The Agency requires a Senior DevOps and Cloud Engineer contract resource through Flextrack to support the Ontario Clinical Report Exchange (OCRE) project. The resource will design, provision, automate, operate, and troubleshoot the AWS infrastructure and deployment pipelines used by OCRE application, integration, data-processing, and frontend components. The role will build GitHub Actions workflows and Java-based AWS Cloud Development Kit (AWS CDK) infrastructure to provision and deploy AWS Glue jobs and connections, Amazon Data Firehose delivery streams, AWS Database Migration Service (AWS DMS) endpoints and tasks, Amazon ECS services on AWS Fargate, and serverless frontend infrastructure using Amazon CloudFront, Amazon S3, and AWS WAF. The resource will manage and troubleshoot containers, EC2 Auto Scaling groups, AWS KMS keys, VPC subnets, routes, security groups, endpoints, and related network controls. Particular attention is required for AWS Glue job networking, including subnet selection, security groups, ENI creation, DNS, routing, and private connectivity to data sources and targets.

Must Haves

• GitHub Actions and Javascript/python AWS CDK experience, including secure AWS authentication, reusable delivery workflows, infrastructure testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.
• AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.
• Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support
• Public Sector Experience: Must have

Description / Responsibilities / Skills

Project Description

• Senior DevOps and Cloud Engineer contract resource to support the Ontario Clinical Report Exchange (OCRE) project.
• Role supports OCRE application, integration, data-processing, and frontend components.
• Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure.

Responsibilities

• Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.
• Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies, security headers, access controls, and deployment invalidations.
• Create and maintain least-privilege IAM roles and policies, AWS KMS keys and key policies, encryption controls, secrets integration, and service permissions required by OCRE workloads and pipelines.
• Implement CloudWatch logs, metrics, dashboards, alarms, deployment evidence, operational diagnostics, and incident-response procedures for cloud infrastructure and application platforms.
• Prepare infrastructure designs, CDK documentation, pipeline documentation, network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.

Knowledge Transfer Details

• The resource will provide ongoing knowledge transfer to the Ontario Health OCRE team throughout the engagement.
• The resource will document Java/Spring Boot services, HAPI FHIR processing, NextGen Connect channels, HL7 v2 and FHIR mappings, Ontario HRM Standard implementation details, Pub/Sub integration, ReactJS components, security configuration, and Docker deployment procedures.
• The resource will participate in code reviews, design walkthroughs, interface and data-mapping reviews, demonstrations, release reviews, operational-readiness reviews, and technical handover sessions.
• All key source code, configuration, tests, technical documentation, runbooks, and lessons learned will be shared with Ontario Health leads before the end of the engagement.

Deliverables

• Reusable GitHub Actions workflows for build, test, scanning, packaging, infrastructure provisioning, application deployment, environment promotion, approval, and rollback.
• Javascript/python AWS CDK applications, stacks, constructs, tests, configuration, and deployment assets that define the assigned OCRE cloud infrastructure.
• AWS Glue job, connection, trigger, IAM, encryption, and networking infrastructure, together with validated private connectivity to required data sources and targets.
• Amazon Data Firehose and AWS DMS infrastructure, including endpoints, subnet groups, tasks, mappings, delivery configuration, logging, monitoring, and operational documentation.
• Amazon ECS on AWS Fargate infrastructure and deployment assets, including Amazon ECR integration, task definitions, services, scaling, load balancing, secrets, health checks, logging, and troubleshooting procedures.
• Serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS, cache and response-header policies, access controls, and deployment invalidation support.
• VPC, subnet, routing, NAT, endpoint, DNS, security-group, IAM, AWS KMS, encryption, and secrets-integration components required by assigned OCRE workloads.
• EC2 launch templates and Auto Scaling group configurations, scaling and health policies, bootstrap or patching procedures, monitoring, and failure-recovery documentation.
• CloudWatch logs, metrics, dashboards, alarms, deployment records, infrastructure tests, validation evidence, incident diagnostics, and operational runbooks.
• Technical designs, infrastructure diagrams, security and network configuration records, release documentation, defect fixes, demonstrations, production support, and knowledge-transfer materials.

Experience & Skill Set Requirements

Rated Criteria

• GitHub Actions and Javascipt/python AWS CDK experience, including secure AWS authentication, reusable workflows, testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting. 25 points
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including deployment, scaling, load balancing, health checks, observability, and troubleshooting. 25 points
• AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS, encryption, and AWS Glue job connectivity troubleshooting. 25 points
• Provisioning and operational experience with AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and incident support. 25 points

Desired Skills

• Experience using GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
• Experience with Java build tooling, javascript build tooling, AWS CDK unit tests, infrastructure policy validation, cdk diff review, CloudFormation change sets, drift detection, and multi-environment configuration.
• Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
• Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.