Contract Senior DevOps/Cloud Engineer (6 months, hybrid in Toronto) supporting an Enterprise Pub/Sub Applications Team: builds and operates AWS infrastructure using CDK (Python/JavaScript) and CloudFormation, running Lambda, API Gateway, ECS, ALBs, and NextGen Connect (Mirth) integrations, with IAM security and observability.
Compensation
Not disclosed
Location
Toronto, Canada
Work setup
Not specified
Seniority
Senior
Employment
Not specified
Experience
Not specified
Category
Devops
Posted
Skills
api
api-gateway
authentication
automation
aws
cdk
cloud
cloudformation
cloudtrail
cloudwatch
container-security
corrective-action
devops
dns
ecs
event-driven-architecture
eventbridge
fargate
fhir
iam
incident-investigation
infrastructure-as-code
java
javascript
lambda
networking
observability
python
root-cause-analysis
serverless
sns
sqs
vpc
Must have
Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized, networking, security, and shared platform resources
Experience managing NextGen Connect (Mirth) in a containerized AWS environment
Strong infrastructure-as-code experience using AWS CDK in Python and JavaScript and AWS CloudFormation
Hands-on experience deploying, configuring, monitoring, and troubleshooting AWS Lambda and Amazon API Gateway applications
Hands-on experience operating Amazon ECS container applications and NextGen Connect behind Application Load Balancers, including Java and Python workloads
Experience with Amazon ECR, ECS on AWS Fargate, NextGen Connect deployments, channel/configuration promotion, clustering, auto scaling, blue-green or rolling deployments
Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, dashboards, alerting, production incident response
Duration: 6 Months (with possible extension for 6 months)
Description:
The Agency requires a Senior DevOps and Cloud Engineer to support the Enterprise Pub/Sub Applications Team.
The resource will build, deploy, operate, and maintain AWS infrastructure and application environments supporting Enterprise Pub/Sub integrations and related The Agency applications.
The work includes serverless applications, containerized services, API integrations, identity and access controls, observability, operational support, and repeatable infrastructure provisioning.
This role will use AWS CDK in Python and JavaScript and AWS CloudFormation to provision and manage cloud resources.
The resource will support Lambda-based applications, API Gateway, Application Load Balancers, ECS container applications running Java and Python workloads, and NextGen Connect integration services; deploy and promote NextGen Connect channels; diagnose deployment and runtime issues; manage IAM roles and permissions; and improve the reliability, security, repeatability, and supportability of cloud environments.
Required Skills:
Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized, networking, security, and shared platform resources and experiencing managing NextGen Connect (Mirth) in a containerized AWS environment.
Strong infrastructure-as-code experience using AWS CDK in Python and JavaScript and AWS CloudFormation, including reusable constructs, stack dependencies, parameters, outputs, environment configuration, change review, deployment, and rollback.
Hands-on experience deploying, configuring, monitoring, and troubleshooting AWS Lambda and Amazon API Gateway applications, including integrations, triggers, permissions, timeouts, concurrency, logging, error handling, and runtime behaviour.
Hands-on experience operating Amazon ECS container applications and NextGen Connect environments behind Application Load Balancers, including Java and Python workloads, container images, task definitions, services, channel deployment and promotion, environment configuration, clustering or horizontal scaling, health checks, networking, monitoring, and production troubleshooting.
Strong AWS identity and access management experience, including IAM roles, policies, resource policies, service roles, permission boundaries, least-privilege access, access diagnostics, and secure management of application permissions.
Responsibilities:
Sr. DevOPS/Cloud Engineer in Toronto, ON (Hybrid) at Amicis Global (Toronto, Canada) — aijobsearch
Design, provision, update, and maintain AWS infrastructure using AWS CDK in Python and JavaScript and AWS CloudFormation across the required application environments.
Develop and maintain reusable infrastructure constructs, stack templates, parameters, outputs, dependencies, environment configuration, validation controls, deployment plans, and rollback procedures.
Build, deploy, configure, monitor, and troubleshoot Lambda-based applications, including runtime settings, environment variables, triggers, concurrency, timeouts, memory, layers, permissions, logging, and failure handling.
Configure and support Amazon API Gateway integrations, routes, stages, deployments, authentication and authorization, request and response handling, throttling, logging, monitoring, and error diagnosis.
Build and maintain ECS container applications running Java, Python, and NextGen Connect services, including container images, registries, task definitions, services, channel and configuration deployment, environment configuration, resource sizing, health checks, scaling, and deployment controls.
Configure and troubleshoot Application Load Balancers, listeners, target groups, routing rules, certificates, security groups, health checks, connection behaviour, and integration with ECS services and APIs.
Investigate deployment, networking, configuration, permission, performance, availability, channel, connector, and runtime issues across Lambda, API Gateway, Application Load Balancers, ECS, NextGen Connect, and related AWS services.
Create and maintain IAM roles, policies, resource policies, service permissions, trust relationships, and least-privilege access controls, and diagnose authorization and access failures.
Manage application networking and connectivity requirements, including VPCs, subnets, route tables, security groups, endpoints, DNS, and controlled access between serverless, container, and managed services.
Implement operational visibility using structured logs, metrics, dashboards, alerts, traces, audit records, health monitoring, and diagnostic tooling for serverless and containerized applications.
Support automated build, infrastructure validation, deployment, NextGen Connect channel and configuration promotion, environment promotion, configuration management, rollback, release coordination, and operational readiness for application and infrastructure changes.
Respond to incidents, perform root-cause analysis, implement corrective actions, maintain runbooks and technical documentation, and provide cloud operations knowledge transfer to The Agency teams.
Must Haves:
Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback.
AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting.
Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment and configuration promotion, target groups, health checks, networking, clustering or scaling, deployment failures, and runtime diagnostics.
AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability, incident response, root-cause analysis, infrastructure automation, and operational documentation.
Desired Skills:
Experience with event-driven AWS services such as Amazon SQS, Amazon SNS, Amazon EventBridge, dead-letter queues, event-source mappings, retries, and asynchronous failure handling.
Experience with Amazon ECR, ECS on AWS Fargate, and NextGen Connect deployments, including channel and configuration promotion, clustering, service auto scaling, deployment circuit breakers, blue-green or rolling deployments, and container security practices.
Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, operational dashboards, alerting, service-level indicators, and production incident response.
Experience supporting healthcare integration platforms, FHIR APIs, publish-and-subscribe workflows, or other regulated environments with privacy, audit, security, and availability requirements.
-
Deliverables:
AWS CDK applications in Python and JavaScript and supporting CloudFormation templates for repeatable provisioning and management of the assigned cloud resources and environments.
Deployed and supported Lambda-based applications with documented triggers, runtime settings, environment configuration, concurrency, timeouts, permissions, monitoring, and failure handling.
Configured and supported API Gateway routes, stages, integrations, authentication and authorization, request and response handling, throttling, logs, metrics, alerts, and diagnostic procedures.
ECS container application infrastructure for Java, Python, and NextGen Connect services, including container registries, task definitions, services, channel and configuration deployment, resource sizing, networking, health checks, clustering or scaling, monitoring, and controlled deployments.
Application Load Balancer configurations covering listeners, certificates, target groups, routing rules, health checks, security groups, access logging, and integration with ECS, NextGen Connect, and application endpoints.
IAM roles, policies, resource policies, trust relationships, service permissions, access reviews, least-privilege controls, and documented resolution of authorization failures.
Cloud networking, connectivity, logging, metrics, dashboards, alerts, tracing, audit, availability, capacity, and security configurations required to operate the assigned services.
Automated build and deployment workflows, infrastructure validation, environment promotion, configuration controls, release evidence, rollback procedures, and operational-readiness records.
Incident investigations, root-cause analyses, corrective actions, troubleshooting guides, architecture and configuration documentation, operating procedures, runbooks, and knowledge-transfer materials.