Senior DevOps/Cloud Engineer - Toronto

Randstad Canada; Toronto; On-site; CAD 129,000 - 175,000; Full time

Job summary

Randstad Canada is seeking an experienced Senior DevOps/Cloud Engineer to design, provision, automate, operate, and troubleshoot cloud infrastructure and deployment pipelines in a Toronto-based, on-site as-needed role.

You will build GitHub Actions workflows and IaC using AWS CDK with JavaScript and Python, and orchestrate containerized workloads across ECS Fargate with a strong focus on security, networking, and incident management.

Qualifications

• Senior-level GitHub Actions and AWS CDK development in JS or Python.
• Proven experience with ECS Fargate, ECR, and Docker.
• Deep AWS security, KMS, IAM, WAF, and VPC networking expertise.
• Public sector or enterprise cloud DevOps experience required.
• Strong data pipeline and serverless knowledge preferred.

Responsibilities

• CI/CD Pipeline Automation: design/build reusable GitHub Actions workflows for pipelines.
• Infra as Code: develop CDK apps in JS/Python for repeatable cloud provisioning.
• Container Orchestration: deploy and troubleshoot ECS Fargate workloads.
• Data & Integration Provisioning: support AWS Glue and DMS tasks and streams.
• Serverless Frontend: manage S3/CloudFront + KMS encryption and routing.
• Security & Networking: enforce least-privilege IAM, KMS, WAF, VPC configs.
• Observability & Incident Mgmt: configure CloudWatch metrics and alerts.

Skills

GitHub Actions

AWS CDK

JavaScript

Python

CI/CD

Cloud security

Networking

Tools

Docker

Amazon ECS Fargate

Amazon ECR

AWS Glue

AWS DMS

AWS KMS

IAM

AWS WAF

CloudFront

VPC networking

Job description

We are seeking an experienced Senior DevOps/Cloud Engineer to design, provision, automate, operate, and troubleshoot cloud infrastructure and automated deployment pipelines. In this role, you will build robust GitHub Actions workflows and develop infrastructure-as-code using JavaScript and Python AWS CDK. You will be responsible for orchestrating containerized workloads, serverless frontends, automated data pipelines, and advanced networking controls across AWS cloud environments. Working closely with cross-functional technical teams, you will enforce strict security, encryption, and networking configurations while driving continuous integration, automated testing, and incident management.

Location: Toronto, ON (Onsite as needed)

Duration: 6-month contract.

Advantages

• Modern IaC & Automation: Hands-on pipeline engineering using GitHub Actions and AWS CDK in JavaScript and Python.
• Advanced Cloud Data Stack: Direct exposure provisioning AWS Glue, Amazon Data Firehose, AWS DMS, and Amazon ECS on AWS Fargate.
• End-to-End Security Focus: Lead AWS KMS encryption, IAM policy design, AWS WAF configuration, and private VPC networking.
• Flexible Onsite Schedule: Enjoy remote flexibility while working onsite in Toronto on an as-needed basis.

Responsibilities

• CI/CD Pipeline Automation: Design and maintain reusable GitHub Actions delivery workflows for building, testing, scanning, packaging, provisioning, environment promotion, and automated rollbacks.
• Infrastructure as Code (IaC): Develop and maintain AWS CDK applications in JavaScript and Python to enable repeatable cloud infrastructure provisioning, configuration management, and dependency tracking.
• Container Workload Orchestration: Deploy, configure, scale, and troubleshoot containerized workloads using Amazon ECS on AWS Fargate, Docker, Amazon ECR, task definitions, and load balancers.
• Data Pipeline & Integration Provisioning: Configure and support AWS Glue jobs, Amazon Data Firehose delivery streams, and AWS DMS replication tasks, endpoints, and subnet groups.
• Serverless Frontend Architecture: Provision and manage serverless frontend environments utilizing Amazon S3, Amazon CloudFront, AWS WAF, SSL/TLS certificates, DNS routing, and cache policies.
• Cloud Security & KMS Encryption: Implement least-privilege IAM roles, AWS KMS key policies, encryption controls, and secrets integration across all pipeline and infrastructure assets.
• Advanced AWS Networking: Design and maintain VPC architectures, subnets, route tables, NAT gateways, VPC endpoints, security groups, and detailed AWS Glue network connectivity.
• Observability & Incident Management: Configure CloudWatch logs, custom metrics, operational dashboards, and alarms to perform root-cause diagnostics and incident response.

Qualifications

• Public Sector Experience: Prior experience delivering cloud and DevOps engineering solutions within a public sector or enterprise environment (Strictly Required).
• CI/CD & IaC Expertise: Senior-level experience with GitHub Actions workflows and hands-on AWS CDK development in JavaScript or Python (Strictly Required).
• Containerization & ECS Fargate: Strong experience deploying and operating Docker workloads using Amazon ECS on AWS Fargate, Amazon ECR, and EC2 Auto Scaling (Strictly Required).
• AWS Security & Networking: Deep experience managing VPCs, subnets, NAT gateways, VPC endpoints, IAM, AWS KMS keys, and AWS Glue network connectivity (Strictly Required).
• Cloud Data & Serverless Services: Demonstrated experience provisioning and operating AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, and AWS WAF (Strictly Required).

Nice-to-Have Assets

• Experience configuring GitHub OpenID Connect (OIDC) federation with AWS and reusable pipeline constructs.
• Hands-on knowledge of CloudFormation change sets, drift detection, and AWS CDK unit testing.
• Familiarity with regulated data environments requiring auditability, privacy controls, and disaster recovery runbooks.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [e-mail] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.