DevOps and AWS Cloud Engineer

Teckhorizon Inc; Toronto; On-site; CAD 100,000 - 140,000; Full time

Job summary

Teckhorizon Inc. is seeking a Senior DevOps/Cloud Engineer to design, provision, automate, operate, and troubleshoot AWS infrastructure and pipelines for the OCRE project in Ontario. The role emphasizes GitHub Actions, CDK, container workloads, and secure deployments across controlled environments.

You will implement networking, data services, monitoring, and automated deployment practices while collaborating with security, privacy, and operations teams to ensure reliability and compliance.

Qualifications

• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
• Hands-on experience developing AWS CDK infrastructure using JavaScript and/or Python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
• Strong experience with Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling, including task definitions, services, load balancing, scaling, logging, health checks, and troubleshooting.
• Strong AWS networking and security experience, including VPCs, subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, KMS keys, and AWS Glue job networking.
• Experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
• Experience with monitoring, logging, production support, and incident troubleshooting for cloud infrastructure and application platforms.
• Public-sector experience is required.

Responsibilities

• Design and maintain GitHub Actions workflows for building, testing, scanning, packaging, provisioning, deploying, promoting, and rolling back changes.
• Develop and maintain reusable AWS CDK applications, stacks, and constructs with configuration, testing, deployment, and troubleshooting.
• Provision and support AWS Glue jobs, connections, triggers, encryption, and network access; troubleshoot ENI, DNS, routing, and VPC issues.
• Provision and support Data Firehose and DMS resources, including endpoints, subnet groups, tasks, mappings, and monitoring.
• Deploy, configure, scale, monitor, and troubleshoot ECS services on AWS Fargate, including Docker images, ECR, secrets, load balancing, and health checks.
• Operate frontend infrastructure using S3, CloudFront, and WAF, including certificates, DNS, cache policies, and deployment invalidations.
• Design and maintain AWS networking components (VPCs, subnets, route tables, NAT, DNS resolution).
• Implement least-privilege IAM roles and policies, KMS keys, and encryption controls.
• Manage EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, health checks, and recovery.
• Implement CloudWatch logs, metrics, dashboards, alarms, and incident-response procedures.
• Prepare technical designs, runbooks, and knowledge-transfer materials.
• Collaborate with architecture, development, data, security, privacy, QA, and operations stakeholders.

Skills

GitHub Actions

AWS CDK (JS/Python)

AWS Fargate (ECS)

Docker & ECR

Cloud networking & VPC

IAM, KMS & encryption

Glue, DMS, Firehose

CloudWatch & monitoring

Public-sector experience

Security & least-privilege IAM

Tools

AWS CDK

Docker

Amazon ECS on Fargate

Amazon ECR

AWS Glue

DMS

CloudFront

S3

VPC Networking

KMS

Job description

About The Role

The Client is seeking a Senior DevOps / Cloud Engineer to support the Ontario Clinical Report Exchange (OCRE) project. The successful candidate will design, provision, automate, operate, and troubleshoot AWS infrastructure and deployment pipelines supporting application, integration, data-processing, and frontend components.

About The Role

The Client is seeking a Senior DevOps / Cloud Engineer to support the Ontario Clinical Report Exchange (OCRE) project. The successful candidate will design, provision, automate, operate, and troubleshoot AWS infrastructure and deployment pipelines supporting application, integration, data-processing, and frontend components.
The role focuses on GitHub Actions, AWS Cloud Development Kit (AWS CDK), containerized workloads, AWS data services, cloud networking, security, monitoring, and reliable deployments across controlled environments.

Key Responsibilities

• Design and maintain GitHub Actions workflows for building, testing, scanning, packaging, provisioning, deploying, promoting, and rolling back application and infrastructure changes.
• Develop and maintain reusable AWS CDK applications, stacks, and constructs, including configuration, testing, deployment, and CloudFormation troubleshooting.
• Provision and support AWS Glue jobs, connections, triggers, permissions, encryption, and network access; troubleshoot ENI creation, subnet capacity, DNS, routing, security groups, NAT, and VPC endpoint issues.
• Provision and support Amazon Data Firehose delivery streams and AWS Database Migration Service (DMS) resources, including endpoints, subnet groups, tasks, mappings, logging, monitoring, and connectivity.
• Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancing, logs, and resource limits.
• Operate frontend infrastructure using Amazon S3, Amazon CloudFront, and AWS WAF, including certificates, DNS, cache policies, security headers, access controls, and deployment invalidations.
• Design and maintain AWS networking components, including VPCs, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, and DNS resolution.
• Implement least-privilege IAM roles and policies, AWS KMS keys, encryption controls, secrets integration, and service permissions.
• Manage EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies, health checks, patching, and recovery from failures.
• Implement CloudWatch logs, metrics, dashboards, alarms, operational diagnostics, deployment records, and incident-response procedures.
• Prepare technical designs, infrastructure and network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.
• Collaborate with architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure and operational requirements.

Required Qualifications And Technical Experience

• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
• Hands-on experience developing AWS CDK infrastructure using JavaScript and/or Python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
• Strong experience with Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling, including task definitions, services, load balancing, scaling, logging, health checks, and troubleshooting.
• Strong AWS networking and security experience, including VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, KMS keys, and AWS Glue job networking.
• Experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
• Experience with monitoring, logging, production support, and incident troubleshooting for cloud infrastructure and application platforms.
• Public-sector experience is required.

Preferred Qualifications

• Experience with GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
• Familiarity with JavaScript and Java build tooling, AWS CDK unit testing, infrastructure policy validation, CDK diff reviews, CloudFormation change sets, drift detection, and multi-environment configuration.
• Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
• Experience supporting regulated healthcare or public-sector workloads requiring privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.