OVERVIEW We are seeking an experienced Apache HTTP Server & Tomcat Design + Ansible Automation Engineer to support large-scale web middleware and infrastructure modernization initiatives within the VDI and Mobility line of business. This role will focus on designing resilient, secure, and scalable Apache HTTP Server ( and Apache Tomcat environments for enterprise Java web applications, while building robust Ansible automation standards to enable hands‑off operations across development, staging, and production environments. The successful candidate will collaborate closely with SRE, Security, Infrastructure, and Application teams to deliver high availability, performance optimization, and automation‑driven lifecycle management aligned with enterprise security and governance frameworks. Location: Toronto, ON (Hybrid – 2–3 days onsite at 120 Bloor Street East or other BMO office) Contract Length: 8 Months (Extension or FTE Conversion Possible) Hours: 8 AM–4 PM or 9 AM–5 PM (Flexible) Experience Level: Senior to Expert (5+ years Apache/Tomcat administration experience) Pay: T4 83.7 CAD RESPONSIBILITIES Architecture & Operations (Apache HTTPD + Tomcat) Design reverse proxy and application tier topologies, including: Single or dual Apache HTTPD layers (edge and internal), terminating TLS Secure integration using mod_proxy_ hardened AJP to Tomcat Active/active Tomcat clusters with load balancing and health checks Session strategies including sticky sessions or replication/Redis‑backed sessions Perform performance engineering and optimization: Apache MPM tuning (event/prefork), worker sizing, KeepAlive, compression, mod_cache, HTTP/2 Tomcat connector tuning, thread pools, JVM sizing (Xms/Xmx), GC tuning (G1/Parallel) Connection reuse strategies, timeout management, and buffer optimization Design for high availability and scalability:



Multi‑AZ/region deployment strategies Zero‑downtime rolling deployments, blue/green and canary cutovers Weighted routing and health‑aware backend management Implement security hardening standards: TLS 1.2+ (preferably 1.3), solid cipher suites, HSTS, OCSP stapling Certificate lifecycle management (ACME/Let’s Encrypt or enterprise PKI) Hardened HTTP headers and method restrictions Secure AJP configuration or disablement when unnecessary Tomcat hardening (remove defaults, secure JMX, restrict manager apps, minimal privileges) Manage lifecycle and operational excellence: Patch management, upgrades, and configuration rollouts via Ansible Drift detection and remediation Develop runbooks for incident response, failover and rollback procedures Ansible Automation Develop idempotent Ansible roles and collections‑based playbooks for: OS hardening (users, limits, sysctl, firewall configurations) Apache installation, vhosts, TLS, reverse proxy configuration, log rotation Tomcat installation (tar or distro), systemd services, server.Xml configuration JVM/GC flags, keystores, context.Xml, logging configuration Application deployment automation (WAR rollout, health validation, rollback) Rolling updates (serial strategies), blue/green or canary deployments Monitoring integrations (JMX exporter, mod_status, metrics/log shipping agents) Implement automation safety mechanisms: Pre‑flight validation (ports, disk space, Java version checks)



Post‑deployment verification (HTTP health endpoints, JMX metric thresholds) Automated backout procedures Collaboration & Governance Partner with application teams on capacity planning and deployment patterns Define enterprise standards, architecture documentation, and DR testing procedures Align platform implementations with CIS, SOC2, ISO, PCI, and enterprise security frameworks Support predictable, GitOps‑aligned CI/CD driven operations QUALIFICATIONS 5+ years administering Apache HTTP Server and Apache Tomcat in large‑scale production environments 3+ years hands‑on Ansible experience (roles, collections, Molecule, CI/CD integration) Strong Linux (RHEL) systems administration skills Solid networking fundamentals, load balancing, and reverse proxy configuration Deep understanding of TLS/PKI implementation and certificate management JVM operational knowledge including heap sizing and garbage collection tuning Experience deploying and operating Java‑based web applications Preferred Experience implementing GitOps and CI/CD automation pipelines Familiarity with enterprise security hardening frameworks (CIS, SOC2, ISO, PCI) Experience designing multi‑region or multi‑AZ highly available web platforms Exposure to Redis‑backed session management or distributed caching strategies Education Post‑secondary degree in Computer Science, Information Systems, Engineering, or a related discipline. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non‑merit factor. We are committed to creating a diverse and inclusive environment for all employees. #J-18808-Ljbffr

📌 Apache Http Server & Tomcat Design + Ansible - C$83 An Hour (Toronto)
🏢 Releady
📍 Toronto