Senior DevOps/Cloud Engineer

We are seeking an experienced Senior DevOps/Cloud Engineer to design, provision, automate, operate, and troubleshoot cloud infrastructure and automated deployment pipelines. In this role, you will build robust GitHub Actions workflows and develop infrastructure-as-code using JavaScript and Python AWS CDK. You will be responsible for orchestrating containerized workloads, serverless frontends, automated data pipelines, and advanced networking controls across AWS cloud environments. Working closely with cross-functional technical teams, you will enforce strict security, encryption, and networking configurations while driving continuous integration, automated testing, and incident management.

Location: Toronto, ON (Onsite as needed)

Duration: 6-month contract.



Advantages
Modern IaC & Automation: Hands-on pipeline engineering using GitHub Actions and AWS CDK in JavaScript and Python.

Advanced Cloud Data Stack: Direct exposure provisioning AWS Glue, Amazon Data Firehose, AWS DMS, and Amazon ECS on AWS Fargate.

End-to-End Security Focus: Lead AWS KMS encryption, IAM policy design, AWS WAF configuration, and private VPC networking.

Flexible Onsite Schedule: Enjoy remote flexibility while working onsite in Toronto on an as-needed basis.



Responsibilities
CI/CD Pipeline Automation: Design and maintain reusable GitHub Actions delivery workflows for building, testing, scanning, packaging, provisioning, environment promotion, and automated rollbacks.

Infrastructure as Code (IaC): Develop and maintain AWS CDK applications in JavaScript and Python to enable repeatable cloud infrastructure provisioning, configuration management, and dependency tracking.

Container Workload Orchestration: Deploy, configure, scale, and troubleshoot containerized workloads using Amazon ECS on AWS Fargate, Docker, Amazon ECR, task definitions, and load balancers.

Data Pipeline & Integration Provisioning: Configure and support AWS Glue jobs, Amazon Data Firehose delivery streams, and AWS DMS replication tasks, endpoints, and subnet groups.

Serverless Frontend Architecture: Provision and manage serverless frontend environments utilizing Amazon S3, Amazon CloudFront, AWS WAF, SSL/TLS certificates, DNS routing, and cache policies.

Cloud Security & KMS Encryption: Implement least-privilege IAM roles, AWS KMS key policies, encryption controls, and secrets integration across all pipeline and infrastructure assets.

Advanced AWS Networking: Design and maintain VPC architectures, subnets, route tables, NAT gateways, VPC endpoints, security groups, and detailed AWS Glue network connectivity.

Observability & Incident Management: Configure CloudWatch logs, custom metrics, operational dashboards, and alarms to perform root-cause diagnostics and incident response.



Qualifications
Public Sector Experience: Prior experience delivering cloud and DevOps engineering solutions within a public sector or enterprise environment (Strictly Required).

CI/CD & IaC Expertise: Senior-level experience with GitHub Actions workflows and hands-on AWS CDK development in JavaScript or Python (Strictly Required).

Containerization & ECS Fargate: Strong experience deploying and operating Docker workloads using Amazon ECS on AWS Fargate, Amazon ECR, and EC2 Auto Scaling (Strictly Required).

AWS Security & Networking: Deep experience managing VPCs, subnets, NAT gateways, VPC endpoints, IAM, AWS KMS keys, and AWS Glue network connectivity (Strictly Required).

Cloud Data & Serverless Services: Demonstrated experience provisioning and operating AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, and AWS WAF (Strictly Required).

Nice-to-Have Assets:
Experience configuring GitHub OpenID Connect (OIDC) federation with AWS and reusable pipeline constructs.

Hands-on knowledge of CloudFormation change sets, drift detection, and AWS CDK unit testing.

Familiarity with regulated data environments requiring auditability, privacy controls, and disaster recovery runbooks.



Summary
If you're interested in the "Senior DevOps/Cloud Engineer" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.