RQ00813 DevOPSCloud Engineer Senior

Required Experience:

• Senior-level experience building GitHub Actions workflows for application and infrastructure deployment environment promotion approvals testing rollback and secure authentication to AWS.
  
• Strong hands-on experience developing AWS CDK infrastructure in Javascript and python including reusable constructs stack composition configuration testing synthesis deployment and CloudFormation troubleshooting.
  
• Strong experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR including task definitions services load balancing scaling logging health checks and container troubleshooting.
  
• Strong AWS networking and security experience covering VPCs public and private subnets route tables NAT VPC endpoints DNS security groups IAM roles AWS KMS keys and AWS Glue job networking.
  
• Hands-on experience provisioning and supporting AWS Glue Amazon Data Firehose AWS DMS Amazon CloudFront Amazon S3 AWS WAF EC2 launch templates and EC2 Auto Scaling groups.
  

Responsibilities:

• Work with OCRE architecture development data security privacy QA and operations stakeholders to define infrastructure deployment networking availability monitoring and support requirements.
  
• Design and maintain GitHub Actions workflows that build test scan package provision deploy promote and roll back OCRE application and infrastructure changes across controlled environments.
  
• Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure configuration permissions monitoring and deployment dependencies.
  
• Provision and configure AWS Glue jobs connections triggers roles encryption settings and network access and troubleshoot ENI creation subnet capacity DNS routing security-group NAT and VPC-endpoint issues.
  
• Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances endpoints subnet groups tasks table mappings logging monitoring and connectivity.
  
• Deploy configure scale monitor and troubleshoot Amazon ECS services on AWS Fargate including Docker images Amazon ECR task definitions secrets health checks load balancers target groups logs and resource limits.
  
• Provision and operate serverless frontend infrastructure using Amazon S3 Amazon CloudFront AWS WAF certificates DNS configuration cache policies security headers access controls and deployment invalidations.
  
• Design and maintain VPC networking subnets route tables NAT gateways VPC endpoints network ACLs security groups DNS resolution and connectivity between OCRE workloads and dependent services.
  
• Create and maintain least-privilege IAM roles and policies AWS KMS keys and key policies encryption controls secrets integration and service permissions required by OCRE workloads and pipelines.
  
• Manage and troubleshoot EC2 launch templates and Auto Scaling groups including AMIs bootstrap scripts instance profiles scaling policies lifecycle behaviour health checks patching and replacement failures.
  
• Implement CloudWatch logs metrics dashboards alarms deployment evidence operational diagnostics and incident-response procedures for cloud infrastructure and application platforms.
  
• Prepare infrastructure designs CDK documentation pipeline documentation network diagrams configuration records deployment instructions runbooks test evidence and knowledge-transfer materials.
  

Desired Skills:

• Experience using GitHub OpenID Connect federation with AWS protected environments reusable workflows deployment approvals artifact controls and least-privilege pipeline roles.
  
• Experience with Java build tooling javascript build tooling AWS CDK unit tests infrastructure policy validation cdk diff review CloudFormation change sets drift detection and multi-environment configuration.
  
• Experience with Amazon CloudWatch AWS CloudTrail AWS Config AWS Systems Manager AWS Secrets Manager Amazon Route 53 AWS Certificate Manager and security monitoring services.
  
• Experience operating regulated healthcare or public-sector workloads that require privacy-aware logging encryption auditability change control resilience backup recovery and production support.
  

Required Skills:

• GitHub Actions and Javascript/python AWS CDK experience including secure AWS authentication reusable delivery workflows infrastructure testing environment promotion CloudFormation deployment rollback and troubleshooting.
  
• Amazon ECS on AWS Fargate Docker Amazon ECR and EC2 Auto Scaling experience including service configuration scaling load balancing health checks observability image or runtime troubleshooting and host-level diagnostics.
  
• AWS networking and security experience including VPCs subnets routes NAT endpoints DNS security groups IAM AWS KMS keys encryption and detailed troubleshooting of AWS Glue job network connectivity.
  
• Infrastructure provisioning and operations experience for AWS Glue Amazon Data Firehose AWS DMS Amazon S3 Amazon CloudFront AWS WAF monitoring logging and production incident support
  

Rated Criteria:.

1. GitHub Actions and Javascipt/python AWS CDK experience including secure AWS authentication reusable workflows testing environment promotion CloudFormation deployment rollback and troubleshooting. 25 points
   
2. Amazon ECS on AWS Fargate Docker Amazon ECR and EC2 Auto Scaling experience including deployment scaling load balancing health checks observability and troubleshooting. 25 points
   
3. AWS networking and security experience including VPCs subnets routes NAT endpoints DNS security groups IAM AWS KMS encryption and AWS Glue job connectivity troubleshooting. 25 points
   
4. Provisioning and operational experience with AWS Glue Amazon Data Firehose AWS DMS Amazon S3 Amazon CloudFront AWS WAF monitoring logging and incident support. 25 points
   

Deliverables:

• Reusable GitHub Actions workflows for build test scanning packaging infrastructure provisioning application deployment environment promotion approval and rollback.
  
• Javascript/python AWS CDK applications stacks constructs tests configuration and deployment assets that define the assigned OCRE cloud infrastructure.
  
• AWS Glue job connection trigger IAM encryption and networking infrastructure together with validated private connectivity to required data sources and targets.
  
• Amazon Data Firehose and AWS DMS infrastructure including endpoints subnet groups tasks mappings delivery configuration logging monitoring and operational documentation.
  
• Amazon ECS on AWS Fargate infrastructure and deployment assets including Amazon ECR integration task definitions services scaling load balancing secrets health checks logging and troubleshooting procedures.
  
• Serverless frontend infrastructure using Amazon S3 Amazon CloudFront AWS WAF certificates DNS cache and response-header policies access controls and deployment invalidation support.
  
• VPC subnet routing NAT endpoint DNS security-group IAM AWS KMS encryption and secrets-integration components required by assigned OCRE workloads.
  
• EC2 launch templates and Auto Scaling group configurations scaling and health policies bootstrap or patching procedures monitoring and failure-recovery documentation.
  
• CloudWatch logs metrics dashboards alarms deployment records infrastructure tests validation evidence incident diagnostics and operational runbooks.
  
• Technical designs infrastructure diagrams security and network configuration records release documentation defect fixes demonstrations production support and knowledge-transfer materials.
  

Must Haves:

• GitHub Actions and Javascript/python AWS CDK experience including secure AWS authentication reusable delivery workflows infrastructure testing environment promotion CloudFormation deployment rollback and troubleshooting.
  
• Amazon ECS on AWS Fargate Docker Amazon ECR and EC2 Auto Scaling experience including service configuration scaling load balancing health checks observability image or runtime troubleshooting and host-level diagnostics.
  
• AWS networking and security experience including VPCs subnets routes NAT endpoints DNS security groups IAM AWS KMS keys encryption and detailed troubleshooting of AWS Glue job network connectivity.
  
• Infrastructure provisioning and operations experience for AWS Glue Amazon Data Firehose AWS DMS Amazon S3 Amazon CloudFront AWS WAF monitoring logging and production incident support