DevOps and AWS Cloud Engineer

About the Role

The Client is seeking a Senior DevOps / Cloud Engineer to support the Ontario Clinical Report Exchange (OCRE) project. The successful candidate will design, provision, automate, operate, and troubleshoot AWS infrastructure and deployment pipelines supporting application, integration, data-processing, and frontend components.

The role focuses on GitHub Actions, AWS Cloud Development Kit (AWS CDK), containerized workloads, AWS data services, cloud networking, security, monitoring, and reliable deployments across controlled environments.

Key Responsibilities

• Design and maintain GitHub Actions workflows for building, testing, scanning, packaging, provisioning, deploying, promoting, and rolling back application and infrastructure changes.
• Develop and maintain reusable AWS CDK applications, stacks, and constructs, including configuration, testing, deployment, and CloudFormation troubleshooting.
• Provision and support AWS Glue jobs, connections, triggers, permissions, encryption, and network access; troubleshoot ENI creation, subnet capacity, DNS, routing, security groups, NAT, and VPC endpoint issues.
• Provision and support Amazon Data Firehose delivery streams and AWS Database Migration Service (DMS) resources, including endpoints, subnet groups, tasks, mappings, logging, monitoring, and connectivity.
• Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancing, logs, and resource limits.
• Operate frontend infrastructure using Amazon S3, Amazon CloudFront, and AWS WAF, including certificates, DNS, cache policies, security headers, access controls, and deployment invalidations.
• Design and maintain AWS networking components, including VPCs, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, and DNS resolution.
• Implement least-privilege IAM roles and policies, AWS KMS keys, encryption controls, secrets integration, and service permissions.
• Manage EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies, health checks, patching, and recovery from failures.
• Implement CloudWatch logs, metrics, dashboards, alarms, operational diagnostics, deployment records, and incident-response procedures.
• Prepare technical designs, infrastructure and network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.
• Collaborate with architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure and operational requirements.

Required Qualifications and Technical Experience

• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
• Hands-on experience developing AWS CDK infrastructure using JavaScript and/or Python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
• Strong experience with Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling, including task definitions, services, load balancing, scaling, logging, health checks, and troubleshooting.
• Strong AWS networking and security experience, including VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, KMS keys, and AWS Glue job networking.
• Experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
• Experience with monitoring, logging, production support, and incident troubleshooting for cloud infrastructure and application platforms.
• Public-sector experience is required.

Preferred Qualifications

• Experience with GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
• Familiarity with JavaScript and Java build tooling, AWS CDK unit testing, infrastructure policy validation, CDK diff reviews, CloudFormation change sets, drift detection, and multi-environment configuration.
• Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
• Experience supporting regulated healthcare or public-sector workloads requiring privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.