Senior DevOps Cloud Engineer

Position Overview The client is seeking a Senior DevOps / Cloud Engineer to design, implement, automate, and support secure and highly available cloud infrastructure and application platforms. The ideal candidate will have extensive hands-on experience with AWS, Terraform/IaC, Ansible, OpenShift/ROSA, CI/CD, containerized and non-containerized workloads, cloud security, and observability. The successful candidate will work closely with development, infrastructure, security, and operations teams to build reliable cloud environments and enable automated, secure, and repeatable deployments. Key Responsibilities Design, provision, configure, and support cloud infrastructure and digital products.Design and manage AWS environments across development, testing, and production.Architect multi-account AWS environments using AWS Well-Architected Framework principles.Develop and maintain Infrastructure as Code using Terraform and Terraform Cloud.Create and maintain Ansible playbooks, roles, and collections for configuration management and deployment automation.Design and maintain CI/CD pipelines for infrastructure and application delivery.Deploy and manage containerized workloads using OpenShift ROSA, Kubernetes, Docker, Helm, and Kustomize.Support both containerized and non-containerized workloads in complex cloud environments.Implement cloud security, access controls, secrets management, vulnerability management, and compliance controls.Monitor cloud infrastructure and applications and improve availability, performance, and reliability.Participate in incident response, root-cause analysis, and remediation activities.Develop runbooks, architectural documentation, and operational standards.Identify opportunities to reduce manual effort through automation and eliminate configuration drift. Required Skills & Experience AWS Cloud Infrastructure 25%Extensive hands-on experience designing, provisioning, and managing AWS infrastructure.Strong experience with:VPCs and subnetsSecurity GroupsIAM policies and rolesEC2ECS / EKSRDSS3Route 53CloudFrontExperience architecting multi-account AWS environments.Knowledge of AWS Well-Architected Framework principles.Experience with AWS cost optimization, including:Reserved InstancesSavings PlansRightsizingExperience implementing and managing:AWS CloudTrailAWS ConfigGuardDutySecurity HubAWS Organizations / SCPsInfrastructure as Code Terraform / Terraform Cloud 20% Extensive experience designing and building Terraform-based Infrastructure as Code.Ability to develop, maintain, refactor, and standardize reusable Terraform modules.Experience with Terraform Cloud, including:WorkspacesRemote stateVariable setsTeam access policiesExperience implementing IaC standards, versioning, documentation, and code reviews.Experience with infrastructure drift detection and remediation.Knowledge of policy-as-code tools such as Sentinel or OPA.Ability to mentor junior team members on Terraform and IaC best practices.Configuration Management Ansible 15%Extensive experience developing and maintaining Ansible playbooks, roles, and collections.Experience automating:Server configurationApplication deploymentCompliance enforcementExperience managing Ansible inventories in dynamic AWS environments.Ability to integrate Ansible automation with CI/CD pipelines.Experience using Ansible Vault for secure credential and secrets management.Strong understanding of idempotent, reusable, and testable automation.Container Platform OpenShift ROSA 10%Hands-on experience administering Red Hat OpenShift Service on AWS (ROSA).Experience with:Cluster upgradesNode scalingAdd-on managementOperatorsHelm chartsKustomizeStrong understanding of OpenShift RBAC, NetworkPolicies, and SecurityContextConstraints (SCCs).Experience securing and hardening OpenShift environments according to organizational security policies and industry standards.Experience supporting both containerized and non-containerized workloads.CI/CD & DevOps Automation 10%Experience designing and maintaining CI/CD pipelines using:GitLab CIAzure DevOps ServicesExperience implementing GitOps workflows using Argo CD.Experience integrating:SASTContainer security scanningDependency scanningAutomated testingStrong understanding of shift-left security and testing practices.Experience maintaining version-controlled, peer-reviewed pipeline-as-code.Security & Compliance 10%Experience embedding security controls throughout cloud infrastructure and CI/CD processes.Strong understanding of least-privilege access and IAM.Experience with AWS Secrets Manager or similar secrets-management solutions.Experience supporting vulnerability management and remediation.Ability to participate in security incidents, incident response, and post-incident reviews.Observability & Reliability 10%Experience implementing cloud monitoring and observability using AWS CloudWatch.Ability to define and monitor SLIs and SLOs for critical services.Experience participating in on-call support and resolving platform-level incidents.Strong root-cause analysis and permanent remediation skills.Experience creating and maintaining operational runbooks and Architectural Decision Records (ADRs). Must-Have Experience Candidates should demonstrate extensive hands-on experience with: AWS infrastructure VPC, IAM, EC2, ECS, EKS, RDS, S3, Route 53, CloudFront.AWS multi-account architecture and Well-Architected Framework.Terraform / Terraform Cloud and enterprise Infrastructure as Code.Ansible playbooks, roles, automation, and configuration management.OpenShift ROSA administration and operations.GitLab CI / Azure DevOps CI/CD pipelines.Containerized and non-containerized workloads.Designing and building Terraform/IaC and Ansible automation.Cloud security, automation, monitoring, and reliability. Work Arrangement This is a fully onsite position in Toronto, Ontario, requiring 5 days onsite per week. Contract is till August 2027.