- Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.

- Strong experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR, including task definitions, services, load balancing, scaling, logging, health checks, and container troubleshooting.

- Strong AWS networking and security experience covering VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, AWS KMS keys, and AWS Glue job networking.

- Hands-on experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.

Responsibilities:

- Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.

- Design and maintain GitHub Actions workflows that build, test, scan, package, provision, deploy, promote, and roll back OCRE application and infrastructure changes across controlled environments.

- Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure, configuration, permissions, monitoring, and deployment dependencies.

- Provision and configure AWS Glue jobs, connections, triggers, roles, encryption settings, and network access, and troubleshoot ENI creation, subnet capacity, DNS, routing, security-group, NAT, and VPC-endpoint issues.

- Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances, endpoints, subnet groups,



tasks, table mappings, logging, monitoring, and connectivity.

- Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancers, target groups, logs, and resource limits.

- Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies, security headers, access controls, and deployment invalidations.

- Design and maintain VPC networking, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, DNS resolution, and connectivity between OCRE workloads and dependent services.

- Create and maintain least-privilege IAM roles and policies, AWS KMS keys and key policies, encryption controls, secrets integration, and service permissions required by OCRE workloads and pipelines.

- Manage and troubleshoot EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies, lifecycle behaviour, health checks, patching, and replacement failures.

- Implement CloudWatch logs, metrics, dashboards, alarms, deployment evidence, operational diagnostics, and incident-response procedures for cloud infrastructure and application platforms.





- Prepare infrastructure designs, CDK documentation, pipeline documentation, network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.

Desired Skills:

- Experience using GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.

- Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.

- Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.

Required Skills:

- Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.

- AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.

- Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support

Rated Criteria:.

- GitHub Actions and Javascipt/python AWS CDK experience, including secure AWS authentication, reusable workflows, testing, setting promotion, CloudFormation deployment, rol

📌 11775 (Toronto)
🏢 Maarut
📍 Toronto