AWS IT Support Specialist (Secret Security Clearance)

Orion Innovation; Ottawa; On-site; CAD 120,000 - 150,000; Full time

Job summary

Orion Innovation is looking for a Senior Infrastructure Engineer in Ottawa, Ontario, specializing in Security Design for cloud-native ecosystems. The role involves architecting secure AWS infrastructure, managing EKS clusters, and developing automation pipelines with GitHub Actions. Candidates should have over 10 years of experience in Infrastructure Engineering, mastery of AWS, Kubernetes, and Docker, as well as proficiency in Python and Terraform. The position emphasizes building resilient platforms that prioritize security from the outset.

Qualifications

• 10+ years in Infrastructure or Systems Engineering with a proven track record of designing secure large-scale environments.
• Expert-level mastery of AWS, Kubernetes, and Docker.
• Mandatory proficiency in Python for infrastructure automation and security tool development.

Responsibilities

• Lead the design and implementation of secure AWS infrastructure.
• Architect and manage production-grade EKS clusters using Docker and Kubernetes.
• Design and maintain secure automation pipelines using GitHub Actions.

Skills

AWS

Kubernetes

Docker

Python

GitHub Actions

Terraform

YAML

Keycloak

Postgres

Tools

Jenkins

Azure DevOps

Job description

We are seeking a Senior Infrastructure Engineer with a deep specialization in Security Design to lead the evolution of our cloud-native ecosystem. In this role, you will be responsible for architecting, building, and maintaining highly available AWS infrastructure while ensuring that security is not an afterthought, but a core component of the design. You will bridge the gap between systems engineering and cyber defense, building resilient platforms that are \"secure by design.\"

Responsibilities

• Infrastructure Security Architecture: Lead the design and implementation of secure AWS infrastructure, ensuring VPC patterns, peering, and transit gateways follow strict security segmentation.
• Kubernetes Platform Engineering: Architect and manage production-grade EKS clusters using Docker and Kubernetes, implementing advanced security controls including OPA/Gatekeeper and workload identity.
• CI/CD Automation: Design and maintain secure automation pipelines using GitHub Actions, ensuring security checks are integrated into the deployment lifecycle.
• Automated Security Infrastructure: Build and maintain central identity and access systems using Keycloak, integrating OIDC/OAuth and LDAP across the enterprise.
• Security as Code: Develop modular, reusable Terraform templates and YAML configurations that incorporate automated compliance checks and security best practices.
• Data & Secret Protection: Manage and secure Postgres DB instances, including encryption strategies and secret management workflows (AWS KMS) to ensure zero-trust data handling.
• Defensive Automation: Develop custom Python-based tooling to automate infrastructure audits, remediation of drift, and security response workflows.

Must-Have Qualifications

• 10+ years in Infrastructure or Systems Engineering with a proven track record of designing secure large-scale environments.
• Expert-level mastery of AWS, Kubernetes, and Docker.
• Mandatory proficiency in Python for infrastructure automation and security tool development.
• Hands-on experience building and managing pipelines with GitHub Actions.
• Expert-level Terraform experience and mastery of YAML for configuration management.
• Practical experience designing and deploying Keycloak and OIDC/OAuth protocols.
• Experience managing and securing Postgres relational databases.

Nice to Have

• Alternative Tools: Experience with Jenkins, Azure DevOps (ADO), or Ruby scripting.
• Shell Scripting: Proficiency in Bash or Shell for system-level maintenance.
• Certifications: AWS Certified Solutions Architect or AWS Certified Security - Specialty.
• Regulatory Knowledge: Experience designing for compliance frameworks such as SOC2, ISO 27001, or NIST.