Original job description
We are seeking a highly skilled Senior DevOps/Cloud Engineer to build, deploy, operate, and maintain enterprise AWS cloud infrastructure and application environments. In this role, you will leverage Infrastructure as Code (IaC) utilizing AWS CDK (in Python and JavaScript) and AWS CloudFormation to deliver repeatable, secure, and observable platforms. You will manage mission-critical containerized and serverless environments, including Amazon ECS running Java and Python workloads, AWS Lambda, Amazon API Gateway, Application Load Balancers, and NextGen Connect integration services. Your work will focus on establishing least-privilege IAM controls, maintaining robust VPC networking, driving operational observability, and optimizing automated CI/CD and deployment workflows.
Location: Toronto, ON (Onsite on an as-needed basis)
Duration: 4-month contract.
Advantages
Modern Infrastructure as Code: Direct hands-on development using AWS CDK (Python/JavaScript) and CloudFormation.
Serverless & Container Ecosystem: Broad exposure managing Amazon ECS, AWS Lambda, API Gateway, and ALB configurations.
Specialized Integration Tooling: Deep operational involvement with NextGen Connect and hybrid service promotion.
Flexible Onsite Schedule: Work in Toronto with an onsite arrangement required only on an as-needed basis.
Responsibilities
Design, provision, update, and maintain AWS cloud infrastructure using AWS CDK (Python and JavaScript) and AWS CloudFormation templates.
Develop and maintain reusable infrastructure constructs, stack architectures, parameters, outputs, dependencies, and automated rollback mechanisms.
Configure, deploy, monitor, and troubleshoot serverless applications powered by AWS Lambda and Amazon API Gateway, managing concurrency, timeouts, triggers, permissions, and error handling.
Build, scale, and administer Amazon ECS container applications hosting Java, Python, and NextGen Connect services behind Application Load Balancers.
Manage target groups, health checks, routing rules, SSL certificates, and security configurations across load balancers and containerized services.
Design and implement least-privilege AWS Identity and Access Management (IAM) roles, policies, permission boundaries, and service roles, resolving access and authorization failures.
Manage VPC networking, subnets, route tables, security groups, endpoints, and secure connectivity across serverless, container, and managed cloud resources.
Implement centralized logging, metrics, distributed tracing, alerting, and operational dashboards to maintain system health and performance visibility.
Facilitate automated builds, infrastructure validation, NextGen Connect channel and configuration promotion, and environment change control.
Conduct root-cause analysis for system incidents, execute corrective actions, maintain operational runbooks, and provide technical knowledge transfer.
Qualifications
Public Sector Experience: Mandatory, proven cloud engineering or DevOps experience supporting initiatives within a public sector environment (Strictly Required).
Advanced AWS CDK & CloudFormation: In-depth, advanced experience with AWS CDK development using Python and JavaScript alongside AWS CloudFormation, including reusable constructs, stack architecture, dependencies, environment configurations, and rollback management (Strictly Required).
AWS Lambda & API Gateway Engineering: Proven hands-on expertise building, deploying, configuring, and troubleshooting AWS Lambda and Amazon API Gateway applications, covering triggers, permissions, concurrency, timeouts, and error handling (Strictly Required).
Amazon ECS, ALB & NextGen Connect: Strong administration experience supporting Amazon ECS container applications and NextGen Connect environments behind Application Load Balancers, managing Java and Python workloads, task definitions, target groups, and configuration promotions (Strictly Required).
Cloud Security & Operations: Comprehensive experience in AWS cloud operations, including IAM least-privilege policies, VPC networking, security groups, observability, incident response, and root-cause analysis (Strictly Required).
Nice-to-Have Assets:
Hands-on experience with asynchronous, event-driven AWS services such as Amazon SQS, Amazon SNS, and Amazon EventBridge.
Experience managing Amazon ECR, ECS on AWS Fargate, service auto-scaling, and deployment circuit breakers.
Practical knowledge of monitoring and distributed tracing using Amazon CloudWatch and AWS CloudTrail.
Familiarity with healthcare data flows, FHIR APIs, or regulated publish-and-subscribe platforms.
Summary
If you're interested in the "Senior DevOps/Cloud Engineer" role based in Toronto, we encourage you to apply online at www.randstad.ca. Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
This posting is for existing and upcoming vacancies.
