Senior DevOps/Cloud Engineer

About the Opportunity

We are looking for a Senior DevOps/Cloud Engineer to join our team on a 12-month contract engagement based in downtown Toronto. This is a hands-on, deeply technical role for a seasoned cloud infrastructure professional who takes full ownership of what they build and operates confidently in structured, enterprise-grade environments.

This is not a generalist role. You need to be genuinely expert in AWS, Terraform, Ansible, and OpenShift ROSA.

What You'll Be Doing

• Design, provision, and manage AWS infrastructure — VPCs, EC2, ECS, EKS, RDS, S3, Route 53, CloudFront, IAM, GuardDuty, Security Hub
• Architect and maintain multi-account AWS environments following Well-Architected Framework principles
• Manage AWS cost optimization strategies — Reserved Instances, Savings Plans, rightsizing
• Develop, maintain, and refactor Terraform modules for all cloud infrastructure — enforcing IaC standards, drift detection, and policy-as-code (Sentinel/OPA)
• Author and maintain Ansible playbooks, roles, and collections for server configuration, deployment, and compliance enforcement
• Operate and administer Red Hat OpenShift Service on AWS (ROSA) — cluster upgrades, node scaling, RBAC, NetworkPolicies, SCCs, Operators, Helm charts
• Design and maintain CI/CD pipelines using GitLab CI and Azure DevOps
• Implement GitOps workflows using ArgoCD for declarative, auditable deployments
• Embed security scanning tools (SAST, container scanning, dependency auditing) into pipeline gates
• Build and maintain observability solutions using AWS CloudWatch — define SLOs, SLIs, maintain runbooks and ADRs
• Lead on-call incident response for platform-level issues and drive post-mortem remediation

Must Haves

• Hands-on AWS infrastructure management — VPCs, EC2, ECS, EKS, RDS, S3, Route 53, CloudFront, IAM
• Multi-account AWS architecture using Well-Architected Framework
• AWS cost optimization experience — Reserved Instances, Savings Plans, rightsizing
• Terraform/Terraform Cloud — module development, remote state, drift detection, Sentinel/OPA policy-as-code
• Ansible — playbooks, roles, dynamic inventory, Vault, CI/CD integration
• Red Hat OpenShift on AWS (ROSA) — cluster administration, RBAC, SCCs
• CI/CD pipeline design using GitLab CI and/or Azure DevOps

Nice to Have

• ArgoCD and GitOps workflow experience
• AWS Secrets Manager and least-privilege IAM design
• CIS benchmark hardening experience
• Linux environment management (CentOS, Ubuntu, CoreOS)
• Scripting in Python, Bash, or similar
• Container scanning and SAST pipeline integration

The Details

• Type: Contract (12 months)
• Location: Toronto, ON — Fully Onsite, downtown core (5 days/week)
• Hours: Monday to Friday, 8:00 AM – 5:00 PM
• Rate: Competitive daily rate
• Security screening will be required prior to engagement commencement
• 1 position available

Only candidates legally eligible to work in Canada will be considered. Only shortlisted candidates will be contacted.

Experience

• Terraform - module development and remote state management: 4 years (required)
• AWS infrastructure-VPCs, EC2, ECS, EKS, RDS, S3, IAM: 3 years (required)
• Ansible-playbooks, roles, CI/CD pipelines: 2 years (required)
• Maintained CI/CD pipelines using GitLab CI or Azure DevOps: 2 years (required)
• Red Hat OpenShift Service on AWS (ROSA): 1 year (required)

Location

• Toronto, ON (required)
• Work Location: In person

Additional Requirements

• Ability to commute/relocate: Toronto, ON: reliably commute or plan to relocate before starting work (required)