Required

Experience:
• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
• Strong hands-on experience developing AWS CDK infrastructure in Javascript and python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
• Robust experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR, including task definitions, services, load balancing, scaling, logging, health checks, and container troubleshooting.
• Strong AWS networking and security experience covering VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, AWS KMS keys, and AWS Glue job networking.
• Hands-on experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.

Responsibilities:
• Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.
• Design and maintain GitHub Actions workflows that build, test, scan, package, provision, deploy, promote, and roll back OCRE application and infrastructure changes across controlled environments.
• Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure, configuration, permissions, monitoring, and deployment dependencies.
• Provision and configure AWS Glue jobs, connections, triggers, roles, encryption settings, and network access, and troubleshoot ENI creation, subnet capacity, DNS, routing, security-group, NAT, and VPC-endpoint issues.
• Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances, endpoints, subnet groups, tasks, table mappings, logging, monitoring, and connectivity.
• ·Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancers, target groups, logs, and resource limits.
• Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies, security headers, access controls, and deployment invalidations.
• Design and maintain VPC networking, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, DNS resolution, and connectivity between OCRE workloads and dependent services.
• Create and maintain least-privilege IAM roles and policies, AWS KMS keys and key policies, encryption controls, secrets integration, and service permissions required by OCRE workloads and pipelines.
• Manage and troubleshoot EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies,



lifecycle behaviour, health checks, patching, and replacement failures.
• Implement CloudWatch logs, metrics, dashboards, alarms, deployment evidence, operational diagnostics, and incident-response procedures for cloud infrastructure and application platforms.
• Prepare infrastructure designs, CDK documentation, pipeline documentation, network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials. Desired

Skills:
• Experience using GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
• Experience with Java build tooling, javascript build tooling, AWS CDK unit tests, infrastructure policy validation, cdk diff review, CloudFormation change sets, drift detection, and multi-environment configuration.
• Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
• Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support. Required

Skills:
• GitHub Actions and Javascript/python AWS CDK experience, including secure AWS authentication, reusable delivery workflows, infrastructure testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.
• AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.
• Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support Rated Criteria:.
• GitHub Actions and Javascipt/python AWS CDK experience, including secure AWS authentication, reusable workflows, testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting. 25 points
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including deployment, scaling, load balancing, health checks, observability, and troubleshooting. 25 points
• AWS networking and security experience, including VPCs, subnets, routes, NAT,



endpoints, DNS, security groups, IAM, AWS KMS, encryption, and AWS Glue job connectivity troubleshooting. 25 points
• Provisioning and operational experience with AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and incident support. 25 points Requirements Deliverables:
• Reusable GitHub Actions workflows for build, test, scanning, packaging, infrastructure provisioning, application deployment, environment promotion, approval, and rollback.
• Javascript/python AWS CDK applications, stacks, constructs, tests, configuration, and deployment assets that define the assigned OCRE cloud infrastructure.
• AWS Glue job, connection, trigger, IAM, encryption, and networking infrastructure, together with validated private connectivity to required data sources and targets.
• Amazon Data Firehose and AWS DMS infrastructure, including endpoints, subnet groups, tasks, mappings, delivery configuration, logging, monitoring, and operational documentation.
• Amazon ECS on AWS Fargate infrastructure and deployment assets, including Amazon ECR integration, task definitions, services, scaling, load balancing, secrets, health checks, logging, and troubleshooting procedures.
• Serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS, cache and response-header policies, access controls, and deployment invalidation support.
• VPC, subnet, routing, NAT, endpoint, DNS, security-group, IAM, AWS KMS, encryption, and secrets-integration components required by assigned OCRE workloads.
• EC2 launch templates and Auto Scaling group configurations, scaling and health policies, bootstrap or patching procedures, monitoring, and failure-recovery documentation.
• CloudWatch logs, metrics, dashboards, alarms, deployment records, infrastructure tests, validation evidence, incident diagnostics, and operational runbooks.
• Technical designs, infrastructure diagrams, security and network configuration records, release documentation, defect fixes, demonstrations, production support, and knowledge-transfer materials. Must Haves:
• GitHub Actions and Javascript/python AWS CDK experience, including secure AWS authentication, reusable delivery workflows, infrastructure testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.
• AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.
• Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support

📌 DevOPS/Cloud Engineer - Senior (Toronto)
🏢 Maarut
📍 Toronto