RQ00813 – DevOps/Cloud Engineer – Senior

Client: Supply Ontario – RQ00813

We are seeking a Senior DevOps/Cloud Engineer to support the Ontario Clinical Report Exchange (OCRE) project. The successful candidate will have extensive hands-on experience with AWS cloud infrastructure, GitHub Actions, AWS Cloud Development Kit (AWS CDK), containerized applications, networking, security, infrastructure automation, and deployment pipelines. The role involves designing, provisioning, automating, operating, and troubleshooting cloud infrastructure and deployment processes supporting application, integration, data-processing, and frontend components. The ideal candidate will have strong experience with AWS Glue, Amazon Data Firehose, AWS Database Migration Service (AWS DMS), Amazon ECS on AWS Fargate, Amazon ECR, Amazon S3, Amazon CloudFront, AWS WAF, EC2 Auto Scaling, and related AWS networking and security services.

Role Snapshot

• Job Title: RQ00813 – DevOps/Cloud Engineer – Senior
• Client: Supply Ontario
• Work Location: 525 University Avenue, Toronto, Ontario, Canada
• Work Arrangement: Hybrid – Onsite as Needed
• Estimated Start Date: November 23, 2026
• Estimated End Date: May 20, 2027
• Business Days: 124.00
• Extension: Option to extend for up to an additional 64 business days at the Agency's discretion
• Hours: 7.25 hours per day, 5 days per week
• Public Sector Experience: Must Have
  
  

Must Have

• GitHub Actions and JavaScript/Python AWS CDK experience, including secure AWS authentication, reusable delivery workflows, infrastructure testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
• Amazon ECS on AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling experience, including service configuration, scaling, load balancing, health checks, observability, image or runtime troubleshooting, and host-level diagnostics.
• AWS networking and security experience, including VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS keys, encryption, and detailed troubleshooting of AWS Glue job network connectivity.
• Infrastructure provisioning and operations experience for AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and production incident support.
  
  

Description

The Agency requires a Senior DevOps and Cloud Engineer contract resource to support the Ontario Clinical Report Exchange (OCRE) project. The resource will design, provision, automate, operate, and troubleshoot the AWS infrastructure and deployment pipelines used by OCRE application, integration, data-processing, and frontend components.

The role will build GitHub Actions workflows and Java-based AWS Cloud Development Kit (AWS CDK) infrastructure to provision and deploy AWS Glue jobs and connections, Amazon Data Firehose delivery streams, AWS Database Migration Service (AWS DMS) endpoints and tasks, Amazon ECS services on AWS Fargate, and serverless frontend infrastructure using Amazon CloudFront, Amazon S3, and AWS WAF.

The resource will manage and troubleshoot containers, EC2 Auto Scaling groups, AWS KMS keys, VPC subnets, routes, security groups, endpoints, and related network controls. Particular attention is required for AWS Glue job networking, including subnet selection, security groups, ENI creation, DNS, routing, and private connectivity to data sources and targets.

Required Experience

• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
• Strong hands-on experience developing AWS CDK infrastructure in JavaScript and Python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
• Strong experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR, including task definitions, services, load balancing, scaling, logging, health checks, and container troubleshooting.
• Strong AWS networking and security experience covering VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, AWS KMS keys, and AWS Glue job networking.
• Hands-on experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
  
  

Responsibilities

• Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.
• Design and maintain GitHub Actions workflows that build, test, scan, package, provision, deploy, promote, and roll back OCRE application and infrastructure changes across controlled environments.
• Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure, configuration, permissions, monitoring, and deployment dependencies.
• Provision and configure AWS Glue jobs, connections, triggers, roles, encryption settings, and network access, and troubleshoot ENI creation, subnet capacity, DNS, routing, security-group, NAT, and VPC-endpoint issues.
• Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances, endpoints, subnet groups, tasks, table mappings, logging, monitoring, and connectivity.
• Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancers, target groups, logs, and resource limits.
• Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies, security headers, access controls, and deployment invalidations.
• Design and maintain VPC networking, subnets, route tables, NAT gateways, VPC endpoints, network ACLs, security groups, DNS resolution, and connectivity between OCRE workloads and dependent services.
• Create and maintain least-privilege IAM roles and policies, AWS KMS keys and key policies, encryption controls, secrets integration, and service permissions required by OCRE workloads and pipelines.
• Manage and troubleshoot EC2 launch templates and Auto Scaling groups, including AMIs, bootstrap scripts, instance profiles, scaling policies, lifecycle behaviour, health checks, patching, and replacement failures.
• Implement CloudWatch logs, metrics, dashboards, alarms, deployment evidence, operational diagnostics, and incident-response procedures for cloud infrastructure and application platforms.
• Prepare infrastructure designs, CDK documentation, pipeline documentation, network diagrams, configuration records, deployment instructions, runbooks, test evidence, and knowledge-transfer materials.
  
  

Desired Skills

• Experience using GitHub OpenID Connect federation with AWS, protected environments, reusable workflows, deployment approvals, artifact controls, and least-privilege pipeline roles.
• Experience with Java build tooling, JavaScript build tooling, AWS CDK unit tests, infrastructure policy validation, cdk diff review, CloudFormation change sets, drift detection, and multi-environment configuration.
• Experience with Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Systems Manager, AWS Secrets Manager, Amazon Route 53, AWS Certificate Manager, and security monitoring services.
• Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging, encryption, auditability, change control, resilience, backup, recovery, and production support.
  
  

Rated Criteria

Candidates will be assessed against the following criteria, each carrying 25 points:

• GitHub Actions and JavaScript/Python AWS CDK Experience – 25 Points: Experience with secure AWS authentication, reusable workflows, testing, environment promotion, CloudFormation deployment, rollback, and troubleshooting.
• Amazon ECS, AWS Fargate, Docker, Amazon ECR, and EC2 Auto Scaling – 25 Points: Experience with deployment, scaling, load balancing, health checks, observability, and troubleshooting.
• AWS Networking and Security – 25 Points: Experience with VPCs, subnets, routes, NAT, endpoints, DNS, security groups, IAM, AWS KMS, encryption, and AWS Glue job connectivity troubleshooting.
• AWS Infrastructure Provisioning and Operations – 25 Points: Experience with AWS Glue, Amazon Data Firehose, AWS DMS, Amazon S3, Amazon CloudFront, AWS WAF, monitoring, logging, and incident support.
  
  

Deliverables

• Reusable GitHub Actions workflows for build, test, scanning, packaging, infrastructure provisioning, application deployment, environment promotion, approval, and rollback.
• JavaScript/Python AWS CDK applications, stacks, constructs, tests, configuration, and deployment assets that define the assigned OCRE cloud infrastructure.
• AWS Glue job, connection, trigger, IAM, encryption, and networking infrastructure, together with validated private connectivity to required data sources and targets.
• Amazon Data Firehose and AWS DMS infrastructure, including endpoints, subnet groups, tasks, mappings, delivery configuration, logging, monitoring, and operational documentation.
• Amazon ECS on AWS Fargate infrastructure and deployment assets, including Amazon ECR integration, task definitions, services, scaling, load balancing, secrets, health checks, logging, and troubleshooting procedures.
• Serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS, cache and response-header policies, access controls, and deployment invalidation support.
• VPC, subnet, routing, NAT, endpoint, DNS, security-group, IAM, AWS KMS, encryption, and secrets-integration components required by assigned OCRE workloads.
• EC2 launch templates and Auto Scaling group configurations, scaling and health policies, bootstrap or patching procedures, monitoring, and failure-recovery documentation.
• CloudWatch logs, metrics, dashboards, alarms, deployment records, infrastructure tests, validation evidence, incident diagnostics, and operational runbooks.
• Technical designs, infrastructure diagrams, security and network configuration records, release documentation, defect fixes, demonstrations, production support, and knowledge-transfer materials.
  
  

How to Apply

If you are interested and your profile matches the requirements, kindly send the following mandatory documents to hrsmss@smsoftconsulting.com by Monday, October 26, 2026, at 12:00 PM EST.

Mandatory Documents

• Updated Resume in Word format
• Skills Matrix and References
• Expected Hourly Rate
• Visa Status
• LinkedIn ID
  
  

Without the mandatory documents, we cannot submit a candidate.

Apply Online: Please apply through the SMSS career website.

WhatsApp Group

For daily job updates, you can also join our WhatsApp group using the link below:

Join our WhatsApp Group

Additional Terms and Conditions

• The term of this Engagement Assignment is for 124 Business Days, with an option to extend for up to an additional 64 days at the Agency's discretion. The Engagement Assignment may be extended for unused Business Days at the Agency's discretion.
• The resource will comply with the Agency's policies and procedures.
• Assignment Type: This position is currently listed as Hybrid. The resource under this request will be required to work onsite at the Hiring Manager's sole discretion.
• Location: Onsite as needed.
• Public Sector Experience: Must Have.
  
  

Email is the best way to reach us.

You have received this message either as a result of contacting our company to express interest in employment or as a result of posting your resume in a location that can be accessed by recruiters or HR specialists, which suggests an interest in being contacted about employment opportunities.