Job Information Term 252 days Assigned Recruiter(s) Margret Tinitha Job Opening ID 11355 Technology Number of Positions 1 Work Experience 7-10 Years City Toronto State/Province Ontario M4C Responsibilities - Design, build and support cloud environments to create digital products - Monitor and assess the performance of applications in a cloud setting to ensure solutions are available - Create, test and implement safeguards to maintain data integrity and protect against unauthorized access General Skills - Experience in one of the leading cloud platforms such as AWS, Azure or Google Cloud, etc - Experience in maintaining complex Linux cloud environments, like CentOS, Ubuntu, or CoreOS, to support modern web technologies: LAMP, Drupal and Elasticsearch / Elasticloud - Experience setting up development environments and mechanism using tools such as JIRA, Confluence, Maven and Jenkins or similar tools - Experience in build tools like Git, Ansible, Chef, Puppet etc. for continuous integration - Knowledge of container-based virtualization technology like Docker or Kubernetes - Integration experience in building and using APIs - Experience applying industry web, architectural and security standards and best practices - Experience in mobile device management for various versions of cellular and tablets Requirements Experience and Skill Set Requirements - Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM policies, EC2, ECS, EKS, RDS, S3, Route 53, and CloudFront.

- Architect multi-account AWS environments following AWS Well-Architected Framework principles.
- Manage AWS cost optimization strategies including Reserved Instances, Savings Plans, and rightsizing.
- Develop, maintain, and refactor Terraform modules and configurations for all cloud infrastructure.
- Author and maintain Ansible playbooks, roles, and collections for server configuration, application deployment, and compliance enforcement.
- Operate and administer Red Hat OpenShift Service on AWS (ROSA) clusters, including cluster upgrades, node scaling, and add-on management.
- Design and maintain CI/CD pipelines (GitLab CI, Azure DevOps Service) for infrastructure and application delivery. Must Haves - Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM policies, EC2, ECS, EKS, RDS,



S3, Route 53, and CloudFront.
- Architect multi-account AWS environments following AWS Well-Architected Framework principles.
- Manage AWS cost optimization strategies including Reserved Instances, Savings Plans, and rightsizing.
- Develop, maintain, and refactor Terraform modules and configurations for all cloud infrastructure.
- Author and maintain Ansible playbooks, roles, and collections for server configuration, application deployment, and compliance enforcement.
- Operate and administer Red Hat OpenShift Service on AWS (ROSA) clusters, including cluster upgrades, node scaling, and add-on management.
- Design and maintain CI/CD pipelines (GitLab CI, Azure DevOps Service) for infrastructure and application delivery.

Skill Set

Requirements - Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM policies, EC2, ECS, EKS, RDS, S3, Route 53, and CloudFront.

- Architect multi-account AWS environments following AWS Well-Architected Framework principles.
- Manage AWS cost optimization strategies including Reserved Instances, Savings Plans, and rightsizing.
- Implement and maintain CloudTrail, Config, GuardDuty, Security Hub, and AWS Organizations SCPs. Infrastructure as Code — Terraform/Terraform Cloud - Develop, maintain, and refactor Terraform modules and configurations for all cloud infrastructure.
- Manage Terraform Cloud workspaces, remote state backends, variable sets, and team access policies.
- Enforce IaC standards including module versioning, input/output conventions, and documentation.
- Implement drift detection and remediation workflows using Terraform Cloud run tasks and policy-as-code (Sentinel or OPA).
- Lead Terraform code review processes and mentor junior team members on best practices.

Configuration

Management — Ansible - Author and maintain Ansible playbooks, roles, and collections for server configuration, application deployment,



and compliance enforcement.

- Manage Ansible inventories across dynamic cloud environments using AWS dynamic inventory plugins.
- Integrate Ansible automation with CI/CD pipelines for repeatable and auditable deployments.
- Use Ansible Vault for secrets management and always ensure secure handling of credentials.
- Develop idempotent, well-tested automation that reduces manual toil and configuration drift.

Container

Platform — OpenShift ROSA - Operate and administer Red Hat OpenShift Service on AWS (ROSA) clusters, including cluster upgrades, node scaling, and add-on management.

- Define and enforce OpenShift RBAC, NetworkPolicies, and SecurityContextConstraints (SCCs).
- Manage Operators, Helm charts, and Kustomize overlays for workload deployment on ROSA.
- Ensure cluster hardening against CIS benchmarks and organizational security policies.
- Design and maintain CI/CD pipelines (GitLab CI, Azure DevOps Service) for infrastructure and application delivery.
- Implement GitOps workflows using ArgoCD for declarative, auditable deployments to OpenShift ROSA.
- Integrate security scanning tooling (SAST, container scanning, dependency auditing) into pipeline gates.
- Champion shift-left testing principles, ensuring infrastructure changes are validated before promotion to production.
- Maintain pipeline-as-code standards with versioned, peer-reviewed pipeline definitions. Security & Compliance - Serve as a key contributor to the team's security posture, embedding security controls throughout the infrastructure and CI/CD lifecycle.
- Implement secrets management solutions (AWS Secrets Manager) and enforce least-privilege access.
- Support vulnerability management processes by triaging findings from infrastructure and container scanning tools.
- Participate in incident response and post-mortem processes, ensuring remediation actions are tracked and resolved. Observability & Reliability - Build and maintain end-to-end observability solutions using AWS CloudWatch.
- Define and track SLOs and SLIs for critical platform services and workloads.
- Lead on-call incident response for platform-level issues, conducting RCAs and driving permanent fixes.
- Produce and maintain runbooks and architectural decision records (ADRs).

📌 DevOPS/Cloud Engineer - Senior (Toronto)
🏢 Maarut
📍 Toronto