DevOPS/Cloud Engineer(26-24596)

Linux Association of Canada; Toronto; On-site; CAD 117,000 - 124,000; Full time

Job summary

Pride Global in Toronto is seeking a DevOPS/Cloud Engineer to design and manage cloud infrastructure and CI/CD pipelines for a 12-month engagement.

You will architect multi-account AWS environments, develop Terraform modules, write Ansible playbooks, and administer OpenShift ROSA clusters on AWS, with a focus on security and cost optimization.

This role requires extensive container experience, IaC discipline, and fluency with GitLab CI and Azure DevOps, delivering reliable, auditable deployments.

Qualifications

• Extensive experience designing and provisioning AWS infrastructure including VPCs, subnets, security groups, IAM and services.
• Design multi-account AWS environments following best practices and Well-Architected Framework.
• Develop and refactor Terraform modules and configurations for cloud infra.
• Author and maintain Ansible playbooks and roles for deployment and compliance.
• Administer ROSA clusters including upgrades, scaling, and add-ons.
• Build and maintain CI/CD pipelines (GitLab CI, Azure DevOps) for infra and apps.

Responsibilities

• Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM, EC2, ECS, EKS, RDS, S3, Route 53, CloudFront.
• Architect multi-account AWS environments following Well-Architected Framework principles.
• Manage AWS cost optimization strategies including Reservations and Savings Plans.
• Develop, maintain Terraform modules and configurations for all cloud infra.
• Author Ansible playbooks, roles, and collections for server config and deployment.
• Operate ROSA clusters with upgrades, node scaling and add-ons management.
• Design and maintain CI/CD pipelines for infra and application delivery.

Skills

Container workloads

Terraform/IAC

Ansible playbooks

AWS infrastructure design

OpenShift ROSA administration

CI/CD pipelines

Security & compliance

Observability & reliability

Tools

Terraform

Ansible

GitLab CI

Azure DevOps

OpenShift ROSA

Job description

Job Title: DevOPS/Cloud Engineer

Location: 222 Jarvis St Toronto, ON (5 Days Onsite)

Duration: 12 Months (With Possible Extension)

Client: Public Sector

Pay Rate: CAD $85-$90 per hour

Required Experience

• Extensive experience working with container and non-container workloads
• Extensive experience working with Designing and building Terraform/IAC and ansible playbooks.

Must Have:

• Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM policies, EC2, ECS, EKS, RDS, S3, Route 53, and CloudFront.
• Architect multi-account AWS environments following AWS Well-Architected Framework principles.
• Manage AWS cost optimization strategies including Reserved Instances, Savings Plans, and rightsizing.
• Develop, maintain, and refactor Terraform modules and configurations for all cloud infrastructure.
• Author and maintain Ansible playbooks, roles, and collections for server configuration, application deployment, and compliance enforcement.
• Operate and administer Red Hat OpenShift Service on AWS (ROSA) clusters, including cluster upgrades, node scaling, and add-on management.
• Design and maintain CI/CD pipelines (GitLab CI, Azure DevOps Service) for infrastructure and application delivery.

Roles and Responsibilities

1. Cloud Infrastructure & AWS

• Design, provision, and manage AWS infrastructure including VPCs, subnets, security groups, IAM policies, EC2, ECS, EKS, RDS, S3, Route 53, and CloudFront.
• Architect multi-account AWS environments following AWS Well-Architected Framework principles.
• Manage AWS cost optimization strategies including Reserved Instances, Savings Plans, and rightsizing.
• Implement and maintain CloudTrail, Config, Guard Duty, Security Hub, and AWS Organizations SCPs.

2. Infrastructure as Code — Terraform/Terraform Cloud

• Develop, maintain, and refactor Terraform modules and configurations for all cloud infrastructure.
• Manage Terraform Cloud workspaces, remote state backends, variable sets, and team access policies.
• Enforce IaC standards including module versioning, input/output conventions, and documentation.
• Implement drift detection and remediation workflows using Terraform Cloud run tasks and policy-as-code (Sentinel or OPA).
• Lead Terraform code review processes and mentor junior team members on best practices.

3. Configuration Management — Ansible

• Author and maintain Ansible playbooks, roles, and collections for server configuration, application deployment, and compliance enforcement.
• Manage Ansible inventories across dynamic cloud environments using AWS dynamic inventory plugins.
• Integrate Ansible automation with CI/CD pipelines for repeatable and auditable deployments.
• Use Ansible Vault for secrets management and always ensure secure handling of credentials.
• Develop idempotent, well-tested automation that reduces manual toil and configuration drift.

4. Container Platform — OpenShift ROSA

• Operate and administer Red Hat OpenShift Service on AWS (ROSA) clusters, including cluster upgrades, node scaling, and add-on management.
• Define and enforce OpenShift RBAC, Network Policies, and SecurityContextConstraints (SCCs).
• Manage Operators, Helm charts, and customize overlays for workload deployment on ROSA.
• Ensure cluster hardening against CIS benchmarks and organizational security policies.

5. CI/CD Pipelines

• Design and maintain CI/CD pipelines (GitLab CI, Azure DevOps Service) for infrastructure and application delivery.
• Implement GitOps workflows using Argo CD for declarative, auditable deployments to OpenShift ROSA.
• Integrate security scanning tooling (SAST, container scanning, dependency auditing) into pipeline gates.
• Champion shift-left testing principles, ensuring infrastructure changes are validated before promotion to production.
• Maintain pipeline-as-code standards with versioned, peer-reviewed pipeline definitions.

6. Security & Compliance

• Serve as a key contributor to the team's security posture, embedding security controls throughout the infrastructure and CI/CD lifecycle.
• Implement secrets management solutions (AWS Secrets Manager) and enforce least-privilege access.
• Support vulnerability management processes by triaging findings from infrastructure and container scanning tools.
• Participate in incident response and post-mortem processes, ensuring remediation actions are tracked and resolved.

7. Observability & Reliability

• Build and maintain end-to-end observability solutions using AWS CloudWatch.
• Define and track SLOs and SLIs for critical platform services and workloads.
• Lead on-call incident response for platform-level issues, conducting RCAs and driving permanent fixes.
• Produce and maintain runbooks and architectural decision records (ADRs).

As a certified minority-owned business, Pride Global and its affiliates - including Russell Tobin, Pride Health, and Pride Now - are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.