RQ00831 - DevOPS/Cloud Engineer - Senior

Required Skills:

• Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized, networking, security, and shared platform resources and experiencing managing NextGen Connect (Mirth) in a containerized AWS environment.
  
• Strong infrastructure-as-code experience using AWS CDK in Python and JavaScript and AWS CloudFormation, including reusable constructs, stack dependencies, parameters, outputs, environment configuration, change review, deployment, and rollback.
  
• Hands-on experience deploying, configuring, monitoring, and troubleshooting AWS Lambda and Amazon API Gateway applications, including integrations, triggers, permissions, timeouts, concurrency, logging, error handling, and runtime behaviour.
  
• Hands-on experience operating Amazon ECS container applications and NextGen Connect environments behind Application Load Balancers, including Java and Python workloads, container images, task definitions, services, channel deployment and promotion, environment configuration, clustering or horizontal scaling, health checks, networking, monitoring, and production troubleshooting.
  
• Strong AWS identity and access management experience, including IAM roles, policies, resource policies, service roles, permission boundaries, least-privilege access, access diagnostics, and secure management of application permissions.
  

Responsibilities:

• Design, provision, update, and maintain AWS infrastructure using AWS CDK in Python and JavaScript and AWS CloudFormation across the required application environments.
  
• Develop and maintain reusable infrastructure constructs, stack templates, parameters, outputs, dependencies, environment configuration, validation controls, deployment plans, and rollback procedures.
  
• Build, deploy, configure, monitor, and troubleshoot Lambda-based applications, including runtime settings, environment variables, triggers, concurrency, timeouts, memory, layers, permissions, logging, and failure handling.
  
• Configure and support Amazon API Gateway integrations, routes, stages, deployments, authentication and authorization, request and response handling, throttling, logging, monitoring, and error diagnosis.
  
• Build and maintain ECS container applications running Java, Python, and NextGen Connect services, including container images, registries, task definitions, services, channel and configuration deployment, environment configuration, resource sizing, health checks, scaling, and deployment controls.
  
• Configure and troubleshoot Application Load Balancers, listeners, target groups, routing rules, certificates, security groups, health checks, connection behaviour, and integration with ECS services and APIs.
  
• Investigate deployment, networking, configuration, permission, performance, availability, channel, connector, and runtime issues across Lambda, API Gateway, Application Load Balancers, ECS, NextGen Connect, and related AWS services.
  
• Create and maintain IAM roles, policies, resource policies, service permissions, trust relationships, and least-privilege access controls, and diagnose authorization and access failures.
  
• Manage application networking and connectivity requirements, including VPCs, subnets, route tables, security groups, endpoints, DNS, and controlled access between serverless, container, and managed services.
  
• Implement operational visibility using structured logs, metrics, dashboards, alerts, traces, audit records, health monitoring, and diagnostic tooling for serverless and containerized applications.
  
• Support automated build, infrastructure validation, deployment, NextGen Connect channel and configuration promotion, environment promotion, configuration management, rollback, release coordination, and operational readiness for application and infrastructure changes.
  
• Respond to incidents, perform root-cause analysis, implement corrective actions, maintain runbooks and technical documentation, and provide cloud operations knowledge transfer to The Agency teams.
  

Desired Skills:

• Experience with event-driven AWS services such as Amazon SQS, Amazon SNS, Amazon EventBridge, dead-letter queues, event-source mappings, retries, and asynchronous failure handling.
  
• Experience with Amazon ECR, ECS on AWS Fargate, and NextGen Connect deployments, including channel and configuration promotion, clustering, service auto scaling, deployment circuit breakers, blue-green or rolling deployments, and container security practices.
  
• Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, operational dashboards, alerting, service-level indicators, and production incident response.
  
• Experience managing secrets, encryption keys, certificates, parameterized configuration, security scanning, vulnerability remediation, and secure application connectivity.
  
• Experience supporting healthcare integration platforms, FHIR APIs, publish-and-subscribe workflows, or other regulated environments with privacy, audit, security, and availability requirements.
  

Required Competencies:

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback.
  
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting.
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics.
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation.
  

Rated Criteria:

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback. 25 Points
  
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points
  

Requirements

Deliverables:

• AWS CDK applications in Python and JavaScript and supporting CloudFormation templates for repeatable provisioning and management of the assigned cloud resources and environments.
  
• Reusable infrastructure constructs, stack definitions, parameters, outputs, environment configuration, dependency mappings, validation controls, deployment plans, and rollback procedures.
  
• Deployed and supported Lambda-based applications with documented triggers, runtime settings, environment configuration, concurrency, timeouts, permissions, monitoring, and failure handling.
  
• Configured and supported API Gateway routes, stages, integrations, authentication and authorization, request and response handling, throttling, logs, metrics, alerts, and diagnostic procedures.
  
• ECS container application infrastructure for Java, Python, and NextGen Connect services, including container registries, task definitions, services, channel and configuration deployment, resource sizing, networking, health checks, clustering or scaling, monitoring, and controlled deployments.
  
• Application Load Balancer configurations covering listeners, certificates, target groups, routing rules, health checks, security groups, access logging, and integration with ECS, NextGen Connect, and application endpoints.
  
• IAM roles, policies, resource policies, trust relationships, service permissions, access reviews, least-privilege controls, and documented resolution of authorization failures.
  
• Cloud networking, connectivity, logging, metrics, dashboards, alerts, tracing, audit, availability, capacity, and security configurations required to operate the assigned services.
  
• Automated build and deployment workflows, infrastructure validation, environment promotion, configuration controls, release evidence, rollback procedures, and operational-readiness records.
  
• Incident investigations, root-cause analyses, corrective actions, troubleshooting guides, architecture and configuration documentation, operating procedures, runbooks, and knowledge-transfer materials.
  

Must Haves:

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback. 25 Points 
  
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points 
  
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics. 25 Points 
  
• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points