Sr. DevOPS/Cloud Engineer

Assignment: RQ00831 - DevOPS/Cloud Engineer - Senior

Requisition: RQ00831

Job Title: Sr. DevOPS/Cloud Engineer for Enterprise Pub/Sub Applications

Client: Ontario Health

Start Date: 2026-11-23

End Date: 2027-03-31

Department: Digital Excellence in Health

Office Location: 525 University Avenue, Toronto

Business Days: 124.00

Location: Onsite as needed basis

Public Sector Experience: must have

Must Haves:

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback. 25 Points
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points

Description

• The Agency requires a Senior DevOps and Cloud Engineer to support the Enterprise Pub/Sub Applications Team. The resource will build, deploy, operate, and maintain AWS infrastructure and application environments supporting Enterprise Pub/Sub integrations and related The Agency applications. The work includes serverless applications, containerized services, API integrations, identity and access controls, observability, operational support, and repeatable infrastructure provisioning. This role will use AWS CDK in Python and JavaScript and AWS CloudFormation to provision and manage cloud resources. The resource will support Lambda-based applications, API Gateway, Application Load Balancers, ECS container applications running Java and Python workloads, and NextGen Connect integration services; deploy and promote NextGen Connect channels; diagnose deployment and runtime issues; manage IAM roles and permissions; and improve the reliability, security, repeatability, and supportability of cloud environments.

Required Skills:

• Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized, networking, security, and shared platform resources and experiencing managing NextGen Connect (Mirth) in a containerized AWS environment.
• Strong infrastructure-as-code experience using AWS CDK in Python and JavaScript and AWS CloudFormation, including reusable constructs, stack dependencies, parameters, outputs, environment configuration, change review, deployment, and rollback.
• Hands-on experience deploying, configuring, monitoring, and troubleshooting AWS Lambda and Amazon API Gateway applications, including integrations, triggers, permissions, timeouts, concurrency, logging, error handling, and runtime behaviour.
• Hands-on experience operating Amazon ECS container applications and NextGen Connect environments behind Application Load Balancers, including Java and Python workloads, container images, task definitions, services, channel deployment and promotion, environment configuration, clustering or horizontal scaling, health checks, networking, monitoring, and production troubleshooting.
• Strong AWS identity and access management experience, including IAM roles, policies, resource policies, service roles, permission boundaries, least-privilege access, access diagnostics, and secure management of application permissions.

Responsibilities:

• Design, provision, update, and maintain AWS infrastructure using AWS CDK in Python and JavaScript and AWS CloudFormation across the required application environments.
• Develop and maintain reusable infrastructure constructs, stack templates, parameters, outputs, dependencies, environment configuration, validation controls, deployment plans, and rollback procedures.
• Build, deploy, configure, monitor, and troubleshoot Lambda-based applications, including runtime settings, environment variables, triggers, concurrency, timeouts, memory, layers, permissions, logging, and failure handling.
• Configure and support Amazon API Gateway integrations, routes, stages, deployments, authentication and authorization, request and response handling, throttling, logging, monitoring, and error diagnosis.
• Build and maintain ECS container applications running Java, Python, and NextGen Connect services, including container images, registries, task definitions, services, channel and configuration deployment, environment configuration, resource sizing, health checks, scaling, and deployment controls.
• Configure and troubleshoot Application Load Balancers, listeners, target groups, routing rules, certificates, security groups, health checks, connection behaviour, and integration with ECS services and APIs.
• Investigate deployment, networking, configuration, permission, performance, availability, channel, connector, and runtime issues across Lambda, API Gateway, Application Load Balancers, ECS, NextGen Connect, and related AWS services.
• Create and maintain IAM roles, policies, resource policies, service permissions, trust relationships, and least-privilege access controls, and diagnose authorization and access failures.
• Manage application networking and connectivity requirements, including VPCs, subnets, route tables, security groups, endpoints, DNS, and controlled access between serverless, container, and managed services.
• Implement operational visibility using structured logs, metrics, dashboards, alerts, traces, audit records, health monitoring, and diagnostic tooling for serverless and containerized applications.
• Support automated build, infrastructure validation, deployment, NextGen Connect channel and configuration promotion, environment promotion, configuration management, rollback, release coordination, and operational readiness for application and infrastructure changes.
• Respond to incidents, perform root-cause analysis, implement corrective actions, maintain runbooks and technical documentation, and provide cloud operations knowledge transfer to The Agency teams.

Desired Skills:

• Experience with event-driven AWS services such as Amazon SQS, Amazon SNS, Amazon EventBridge, dead-letter queues, event-source mappings, retries, and asynchronous failure handling.
• Experience with Amazon ECR, ECS on AWS Fargate, and NextGen Connect deployments, including channel and configuration promotion, clustering, service auto scaling, deployment circuit breakers, blue-green or rolling deployments, and container security practices.
• Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, operational dashboards, alerting, service-level indicators, and production incident response.
• Experience managing secrets, encryption keys, certificates, parameterized configuration, security scanning, vulnerability remediation, and secure application connectivity.
• Experience supporting healthcare integration platforms, FHIR APIs, publish-and-subscribe workflows, or other regulated environments with privacy, audit, security, and availability requirements.

Required Competencies:

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback.
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting.
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics.
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation.

Rated Criteria: 100 Points

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback. 25 Points
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points

Deliverables:

• AWS CDK applications in Python and JavaScript and supporting CloudFormation templates for repeatable provisioning and management of the assigned cloud resources and environments.
• Reusable infrastructure constructs, stack definitions, parameters, outputs, environment configuration, dependency mappings, validation controls, deployment plans, and rollback procedures.
• Deployed and supported Lambda-based applications with documented triggers, runtime settings, environment configuration, concurrency, timeouts, permissions, monitoring, and failure handling.
• Configured and supported API Gateway routes, stages, integrations, authentication and authorization, request and response handling, throttling, logs, metrics, alerts, and diagnostic procedures.
• ECS container application infrastructure for Java, Python, and NextGen Connect services, including container registries, task definitions, services, channel and configuration deployment, resource sizing, networking, health checks, clustering or scaling, monitoring, and controlled deployments.
• Application Load Balancer configurations covering listeners, certificates, target groups, routing rules, health checks, security groups, access logging, and integration with ECS, NextGen Connect, and application endpoints.
• IAM roles, policies, resource policies, trust relationships, service permissions, access reviews, least-privilege controls, and documented resolution of authorization failures.
• Cloud networking, connectivity, logging, metrics, dashboards, alerts, tracing, audit, availability, capacity, and security configurations required to operate the assigned services.
• Automated build and deployment workflows, infrastructure validation, environment promotion, configuration controls, release evidence, rollback procedures, and operational-readiness records.
• Incident investigations, root-cause analyses, corrective actions, troubleshooting guides, architecture and configuration documentation, operating procedures, runbooks, and knowledge-transfer materials.

Additional Terms

• The term of this Engagement Assignment is for 124 Business Days, with an option to extend for up to an additional 64 days at the Agency's discretion. The Engagement Assignment may be extended for unused Business Days at the Agency's discretion.
• The resource will comply with the Agency's policies and procedures.
• The resource will be issued an Agency laptop and is expected to provide at least one additional monitor, an external keyboard and a mouse at their own expense. In addition, when the resource is working from their home location they must have a private office space and are not permitted to work in an open communal space. Internet connection must be hard-wired and suitable bandwidth to support the IT requirements of this role. If these conditions cannot be met within their home office space, the resource will transition to full time in office, and the hybrid option will no longer be available.
• The Agency systems cannot be accessed from outside the province of Ontario, and Agency assets including laptops and related equipment cannot be removed from the province of Ontario, without prior written approval from the Agency.
• Assignment Type: This position is currently listed as "Hybrid". The resource under this request will be required to work onsite as per Hiring Manager sole discretion.