11823

Maarut; Toronto; On-site; CAD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Maarut is seeking a senior AWS cloud engineer/DevOps professional to design, deploy, and operate production serverless and containerized resources in AWS. You will manage NextGen Connect in a containerized environment, with Lambda, API Gateway, ECS, and ALB workloads.

Responsibilities include building reusable infrastructure, troubleshooting runtime issues, and maintaining security with least-privilege access and robust monitoring across services.

Qualifications

• Experience with AWS Lambda and API Gateway deployments, permissions, and monitoring.
• Hands-on with ECS container apps and NextGen Connect in AWS.
• Strong IAM, VPC, security controls and least-privilege practices.

Responsibilities

• Develop and maintain infrastructure constructs, templates, and deployment plans.
• Build and troubleshoot Lambda-based apps and API Gateway integrations.
• Configure and manage ECS services and NextGen Connect channels.
• Configure Load Balancers and monitor production performance.
• Investigate incidents and perform root-cause analysis.

Skills

Cloud engineering

DevOps practices

Incident response

Security best practices

Tools

AWS Lambda

API Gateway

ECS

NextGen Connect

IAM

VPC networking

Application Load Balancer

Job description

• Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized, networking, security, and shared platform resources and experiencing managing NextGen Connect (Mirth) in a containerized AWS environment.
  
• Hands-on experience deploying, configuring, monitoring, and troubleshooting AWS Lambda and Amazon API Gateway applications, including integrations, triggers, permissions, timeouts, concurrency, logging, error handling, and runtime behaviour.
  
• Hands-on experience operating Amazon ECS container applications and NextGen Connect environments behind Application Load Balancers, including Java and Python workloads, container images, task definitions, services, channel deployment and promotion, environment configuration, clustering or horizontal scaling, health checks, networking, monitoring, and production troubleshooting.
  
• Strong AWS identity and access management experience, including IAM roles, policies, resource policies, service roles, permission boundaries, least-privilege access, access diagnostics, and secure management of application permissions.
  

Responsibilities:

• Develop and maintain reusable infrastructure constructs, stack templates, parameters, outputs, dependencies, environment configuration, validation controls, deployment plans, and rollback procedures.
  
• Build, deploy, configure, monitor, and troubleshoot Lambda-based applications, including runtime settings, environment variables, triggers, concurrency, timeouts, memory, layers, permissions, logging, and failure handling.
  
• Configure and support Amazon API Gateway integrations, routes, stages, deployments, authentication and authorization, request and response handling, throttling, logging, monitoring, and error diagnosis.
  
• Build and maintain ECS container applications running Java, Python, and NextGen Connect services, including container images, registries, task definitions, services, channel and configuration deployment, environment configuration, resource sizing, health checks, scaling, and deployment controls.
  
• Configure and troubleshoot Application Load Balancers, listeners, target groups, routing rules, certificates, security groups, health checks, connection behaviour, and integration with ECS services and APIs.
  
• Investigate deployment, networking, configuration, permission, performance, availability, channel, connector, and runtime issues across Lambda, API Gateway, Application Load Balancers, ECS, NextGen Connect, and related AWS services.
  
• Create and maintain IAM roles, policies, resource policies, service permissions, trust relationships, and least-privilege access controls, and diagnose authorization and access failures.
  
• Manage application networking and connectivity requirements, including VPCs, subnets, route tables, security groups, endpoints, DNS, and controlled access between serverless, container, and managed services.
  
• Implement operational visibility using structured logs, metrics, dashboards, alerts, traces, audit records, health monitoring, and diagnostic tooling for serverless and containerized applications.
  
• Support automated build, infrastructure validation, deployment, NextGen Connect channel and configuration promotion, environment promotion, configuration management, rollback, release coordination, and operational readiness for application and infrastructure changes.
  
• Respond to incidents, perform root-cause analysis, implement corrective actions, maintain runbooks and technical documentation, and provide cloud operations knowledge transfer to The Agency teams.
  

Desired Skills:

• Experience with event-driven AWS services such as Amazon SQS, Amazon SNS, Amazon EventBridge, dead-letter queues, event-source mappings, retries, and asynchronous failure handling.
  
• Experience with Amazon ECR, ECS on AWS Fargate, and NextGen Connect deployments, including channel and configuration promotion, clustering, service auto scaling, deployment circuit breakers, blue-green or rolling deployments, and container security practices.
  
• Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, operational dashboards, alerting, service-level indicators, and production incident response.
  
• Experience managing secrets, encryption keys, certificates, parameterized configuration, security scanning, vulnerability remediation, and secure application connectivity.
  
• Experience supporting healthcare integration platforms, FHIR APIs, publish-and-subscribe workflows, or other regulated environments with privacy, audit, security, and availability requirements.
  
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting.
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics.
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation.
  

Rated Criteria:

• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points
  

Requirements

• Reusable infrastructure constructs, stack definitions, parameters, outputs, environment configuration, dependency mappings, validation controls, deployment plans, and rollback procedures.
  
• Deployed and supported Lambda-based applications with documented triggers, runtime settings, environment configuration, concurrency, timeouts, permissions, monitoring, and failure handling.
  
• Configured and supported API Gateway routes, stages, integrations, authentication and authorization, request and response handling, throttling, logs, metrics, alerts, and diagnostic procedures.
  
• ECS container application infrastructure for Java, Python, and NextGen Connect services, including container registries, task definitions, services, channel and configuration deployment, resource sizing, networking, health checks, clustering or scaling, monitoring, and controlled deployments.
  
• Application Load Balancer configurations covering listeners, certificates, target groups, routing rules, health checks, security groups, access logging, and integration with ECS, NextGen Connect, and application endpoints.
  
• IAM roles, policies, resource policies, trust relationships, service permissions, access reviews, least-privilege controls, and documented resolution of authorization failures.
  
• Cloud networking, connectivity, logging, metrics, dashboards, alerts, tracing, audit, availability, capacity, and security configurations required to operate the assigned services.
  
• Automated build and deployment workflows, infrastructure validation, environment promotion, configuration controls, release evidence, rollback procedures, and operational-readiness records.
  
• Incident investigations, root-cause analyses, corrective actions, troubleshooting guides, architecture and configuration documentation, operating procedures, runbooks, and knowledge-transfer materials.
  

Must Haves:

• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points