Senior DevOps Engineer - AWS

Assignment: RQ00780 - DevOPS/Cloud Engineer - Senior

Requisition: RQ00780

Job Title: Senior DevOps Engineer AWS

Client: Ontario Health

Start Date: 2026-09-21

End Date: 2027-03-31

Department: Digital Excellence in Health

Office Location: 525 University Avenue, Toronto

Business Days: 150.00

Location: onsite as needed basis

Public Sector Experience: MUST HAVE

Must Haves:

• Strong hands-on experience designing, maintaining, and troubleshooting CI/CD pipelines using GitHub Actions and Strong infrastructure-as-code experience using AWS CloudFormation and AWS CDK, including development and maintenance of CDK solutions in Python and JavaScript.
• Experience building and maintaining Linux machine images and automated image pipelines using AWS EC2 Image Builder and Experience administering and supporting PostgreSQL or comparable enterprise database platforms, including connectivity, access, backup and recovery, performance, and operational troubleshooting and Experience administering and troubleshooting Amazon OpenSearch Service clusters, including cluster health, indexes, capacity, access, performance, and operational issues.
• Experience deploying, configuring, maintaining, and troubleshooting Mirth Connect integration engine in Amazon ECS, including container and task configuration, Mirth channels and connectors, secure endpoints, certificates and secrets, logging, JVM/runtime issues, and connectivity to external systems.
• Experience maintaining enterprise identity and access management and SMART on FHIR/OAuth configurations using NetIQ or comparable IAM platforms, including OAuth2/OIDC clients, redirect URIs, scopes, authorization and token endpoint settings, roles, permissions, secrets, and authentication troubleshooting.
• Experience supporting secure connectivity and integration endpoints between cloud applications and external healthcare systems, including eReferral platforms and enterprise master data management services and Experience using AWS monitoring, logging, security, and configuration services such as CloudWatch, IAM, Secrets Manager, and related operational tooling and Strong production support, incident troubleshooting, technical documentation, change management, and stakeholder collaboration skills.

Description

• The Provincial Health Services Directory (PHSD) is enhancing its user experience and integration capabilities to support eReferral workflows directly within electronic medical record (EMR) environments. The solution includes SMART on FHIR launch and fhirContext processing, FHIR read and write operations, Ontario Context Management Services (CMS) support using FHIRCast, semantic provider and service search, advanced mapping, and integrations with provincial and external healthcare systems. This role will provide senior DevOps and platform engineering support for the PHSD eReferral solution, with responsibility for maintaining reliable build, deployment, infrastructure, runtime, and operational capabilities across AWS environments. The work includes maintaining GitHub Actions pipelines and creating or updating infrastructure as code using AWS CloudFormation and AWS CDK in Python and JavaScript. The resource will deploy, operate, and troubleshoot application components running on Amazon EC2 and Amazon ECS, including Tomcat, Java, Spring Boot, Node.js, Mirth Connect integration engine, and supporting Linux environments. The role will also manage Linux images using AWS EC2 Image Builder and support database operations, application configuration, monitoring, and production troubleshooting. The work includes operational management of NetIQ identity and access management, SMART on FHIR and OAuth2/OIDC application settings, Amazon SQS, Amazon Data Firehose, Amazon S3, OpenSearch clusters, database services, and Mirth Connect running in Amazon ECS. The resource will support integration connectivity to eReferral systems, IBM Master Data Management (MDM), and FHIR Pub/Sub components, working closely with application, integration, security, and architecture teams to maintain secure, stable, supportable, and repeatable environments for the PHSD platform.

Required Skills:

• Senior DevOps, cloud platform, or site reliability engineering experience supporting complex enterprise, healthcare, or digital health applications.
• Strong hands-on experience designing, maintaining, and troubleshooting CI/CD pipelines using GitHub Actions and Strong infrastructure-as-code experience using AWS CloudFormation and AWS CDK, including development and maintenance of CDK solutions in Python and JavaScript.
• Hands-on AWS operations experience supporting applications running on Amazon EC2 and Amazon ECS, including deployment, configuration, scaling, and production troubleshooting. And Strong troubleshooting experience with Tomcat, Java and Spring Boot applications, Node.js services, Linux operating systems, and containerized application runtimes.
• Experience building and maintaining Linux machine images and automated image pipelines using AWS EC2 Image Builder and Experience administering and supporting PostgreSQL or comparable enterprise database platforms, including connectivity, access, backup and recovery, performance, and operational troubleshooting and Experience administering and troubleshooting Amazon OpenSearch Service clusters, including cluster health, indexes, capacity, access, performance, and operational issues.
• Experience configuring and operating AWS messaging, streaming, and storage services including Amazon SQS, Amazon Data Firehose, and Amazon S3.
• Experience deploying, configuring, maintaining, and troubleshooting Mirth Connect integration engine in Amazon ECS, including container and task configuration, Mirth channels and connectors, secure endpoints, certificates and secrets, logging, JVM/runtime issues, and connectivity to external systems.
• Experience maintaining enterprise identity and access management and SMART on FHIR/OAuth configurations using NetIQ or comparable IAM platforms, including OAuth2/OIDC clients, redirect URIs, scopes, authorization and token endpoint settings, roles, permissions, secrets, and authentication troubleshooting.
• Experience supporting secure connectivity and integration endpoints between cloud applications and external healthcare systems, including eReferral platforms and enterprise master data management services and Experience using AWS monitoring, logging, security, and configuration services such as CloudWatch, IAM, Secrets Manager, and related operational tooling and Strong production support, incident troubleshooting, technical documentation, change management, and stakeholder collaboration skills.
• Strong senior-level DevOps and AWS platform engineering experience supporting production enterprise applications and integration platforms.
• Strong hands-on experience with Git, GitHub, GitHub Actions, CI/CD pipeline design, reusable workflow automation, environment promotion, release automation, and deployment troubleshooting.
• Strong infrastructure-as-code experience using AWS CloudFormation and AWS CDK, including hands-on development in Python and JavaScript.
• Experience deploying, configuring, monitoring, and troubleshooting applications running on Amazon EC2 and Amazon ECS, including Linux and container-based workloads.
• Experience deploying, configuring, maintaining, and troubleshooting Mirth Connect integration engine in Amazon ECS, including ECS service and task configuration, Mirth channels/connectors, Java/JVM runtime behavior, secure endpoints, certificates, secrets, logging, and external system connectivity.
• Strong troubleshooting skills across Tomcat, Java, Spring Boot, Node.js, Linux, application configuration, networking, logs, and runtime dependencies.
• Experience creating and maintaining standardized Linux images and automated image pipelines using AWS EC2 Image Builder.
• Experience managing PostgreSQL or comparable enterprise databases, including access, connectivity, backups, recovery, performance, capacity, and operational support.
• Experience administering Amazon OpenSearch Service clusters, indexes, storage, access control, monitoring, performance, scaling, and operational maintenance.
• Experience configuring and supporting AWS services including SQS, Amazon Data Firehose, S3, CloudWatch, IAM, Secrets Manager, EC2, and ECS.
• Experience maintaining secure enterprise IAM and SMART on FHIR/OAuth integrations using NetIQ or comparable platforms, including OAuth2/OIDC client configuration, redirect URIs, scopes, authorization and token endpoints, application access, roles, permissions, secrets, and authentication troubleshooting.
• Experience supporting secure connectivity and integration dependencies between AWS applications and external eReferral systems, IBM MDM, FHIR Pub/Sub services, or comparable enterprise systems.
• Experience with production operations including monitoring, alerting, incident response, root-cause analysis, patching, change management, capacity management, backup and recovery, and operational readiness.
• Strong technical documentation, runbook development, automation, problem solving, communication, and collaboration skills across application, infrastructure, security, integration, and architecture teams.

Responsibilities:

• Maintain and enhance GitHub Actions pipelines used to build, test, package, deploy, and promote PHSD application and infrastructure components across environments.
• Create, update, review, and troubleshoot AWS infrastructure as code using CloudFormation and AWS CDK implemented in Python and JavaScript.
• Deploy, configure, maintain, and troubleshoot PHSD workloads running on Amazon EC2 and Amazon ECS, including container configuration, runtime dependencies, environment settings, and deployment failures.
• Troubleshoot Tomcat, Java, Spring Boot, Node.js, Linux, and container runtime issues across development, test, staging, and production environments.
• Deploy, configure, maintain, upgrade, monitor, and troubleshoot Mirth Connect integration engine running in Amazon ECS, including ECS services and task definitions, container runtime settings, Mirth channels and connectors, certificates, secrets, logs, JVM behavior, and network connectivity.
• Build, maintain, patch, test, and promote standardized Linux images and image pipelines using AWS EC2 Image Builder.
• Manage database operations supporting PHSD, including access, connectivity, configuration, backup and recovery, performance monitoring, capacity, and incident troubleshooting.
• Administer and support OpenSearch clusters, including cluster health, node and storage capacity, indexes, mappings, access controls, query performance, upgrades, and operational troubleshooting.
• Configure, maintain, monitor, and troubleshoot Amazon SQS queues, Amazon Data Firehose delivery streams, and Amazon S3 buckets used by PHSD and related integrations.
• Maintain NetIQ IAM integration and SMART on FHIR/OAuth application configuration, including OAuth2/OIDC clients, redirect URIs, scopes, authorization and token endpoint settings, roles, permissions, service identities, secrets, and authentication troubleshooting across environments.
• Maintain and troubleshoot secure application and infrastructure connectivity to eReferral systems, IBM MDM, and other external or provincial services used by the PHSD solution.
• Support infrastructure and operational components required for FHIR Pub/Sub, subscription, and event-driven integration patterns used by the PHSD platform.
• Maintain application configuration, secrets, certificates, IAM permissions, environment-specific settings, and other operational configuration required for secure deployments.
• Implement and maintain monitoring, logging, alerting, dashboards, and operational diagnostics using CloudWatch and related AWS services.
• Support release planning, production deployments, incident response, root-cause analysis, patching, capacity management, and continuous improvement of platform reliability and deployment automation.
• Produce and maintain infrastructure documentation, deployment procedures, environment configuration documentation, operational runbooks, recovery procedures, and knowledge transfer materials.

Desired Skills:

• Experience supporting Provincial Health Services Directory (PHSD), eReferral, provider directory, healthcare service directory, or similar healthcare integration platforms.
• Operational experience supporting SMART on FHIR and OAuth2/OIDC configuration for EMR-integrated applications, including launch configuration, client registration, redirect URIs, scopes, token endpoints, secrets, and environment-specific authentication settings; familiarity with fhirContext, FHIR APIs, and FHIRCast is an asset.
• Experience supporting connectivity to Ontario eReferral solutions, central intake systems, or products such as RICOH, Novari, or comparable eReferral platforms.
• Experience operating Java and Spring Boot applications on Tomcat, EC2, ECS, or containerized AWS platforms.
• Experience operating and supporting Mirth Connect integration engine on Amazon ECS, including channel and connector deployments, container configuration, upgrades, secure connectivity, certificates, secrets, monitoring, and troubleshooting.
• Experience supporting Node.js applications and build or deployment tooling in enterprise AWS environments.
• Experience administering or supporting NetIQ identity and access management services and application integrations.
• Experience supporting integrations with IBM MDM or other enterprise master data management platforms.
• Experience administering Amazon OpenSearch Service for production workloads, including performance, capacity, security, index management, and version or configuration changes.
• Experience with PostgreSQL operations, database connectivity, backup and recovery, performance troubleshooting, and application database support.
• Experience supporting FHIR Pub/Sub, FHIR Subscriptions, EventBridge, SNS, SQS, Firehose, or related event-driven integration patterns.
• Experience operating AWS environments using EC2, ECS, S3, CloudWatch, IAM, Secrets Manager, EC2 Image Builder, CloudFormation, and AWS CDK.

Rated Criteria: 100 Points

• CI/CD and infrastructure-as-code experience including GitHub Actions, AWS CloudFormation, AWS CDK, Python, JavaScript, release automation, environment promotion, and deployment troubleshooting. 25 Points
• AWS platform and runtime operations including EC2, ECS, Linux, EC2 Image Builder, Tomcat, Java, Spring Boot, Node.js, monitoring, production support, incident response, and operational reliability. 25 Points
• Data, search, messaging, integration-engine, and identity operations including PostgreSQL, OpenSearch cluster management, SQS, Firehose, S3, Mirth Connect on ECS, NetIQ IAM, SMART on FHIR/OAuth configuration, security settings, and integration connectivity. 25 Points
• Healthcare integration and production support including eReferral systems, IBM MDM, FHIR Pub/Sub, SMART on FHIR operational dependencies, EPIC/MEDITECH/CERNER integration, Experience with eReferral systems (such as Ocean/Novari/Ricoh) 25 Points

Deliverables:

• Maintained and enhanced GitHub Actions CI/CD pipelines for PHSD application and infrastructure deployments.
• CloudFormation templates and AWS CDK infrastructure code maintained in Python and JavaScript.
• Operationally supported Amazon EC2 and Amazon ECS environments for PHSD application workloads.
• Deployment, configuration, and troubleshooting support for Tomcat, Java, Spring Boot, Node.js, Linux, and containerized application components.
• Standardized Linux images and automated AWS EC2 Image Builder pipelines, including required maintenance and patch updates.
• Database operational configuration and support, including connectivity, access, backup and recovery, performance, and troubleshooting.
• Amazon OpenSearch Service cluster administration, monitoring, scaling, index support, access management, and operational maintenance.
• Operational configuration and support for Amazon SQS, Amazon Data Firehose, and Amazon S3 components used by PHSD and associated integrations.
• Operationally supported Mirth Connect integration engine running in Amazon ECS, including service and task configuration, Mirth channels and connectors, upgrades, secure connectivity, certificates and secrets, logging, monitoring, and runtime troubleshooting.
• NetIQ IAM and SMART on FHIR/OAuth configuration and operational support for PHSD authentication and authorization, including client settings, redirect URIs, scopes, endpoints, roles, permissions, secrets, and application access.
• Maintained and troubleshot connectivity and configuration for integrations with eReferral systems, IBM MDM, and related provincial or external services.
• Infrastructure and operational support for FHIR Pub/Sub, subscription, and event-driven integration components.
• Monitoring, logging, alerting, dashboards, and operational diagnostics required to support PHSD environments and services.
• Maintained secrets, IAM permissions, environment configuration, deployment parameters, and related secure runtime configuration.
• Production deployment support, incident troubleshooting, root-cause analysis, patching, operational improvements, and environment maintenance.
• Current infrastructure documentation, deployment guides, environment documentation, operational runbooks, recovery procedures, and knowledge transfer materials.

Additional Terms

• The term of this Engagement Assignment is for 150 Business Days, with an option to extend for up to an additional 251 days at the Agency's discretion. The Engagement Assignment may be extended for unused Business Days at the Agency's discretion.
• The resource will comply with the Agency's policies and procedures.
• The resource will be issued an Agency laptop and is expected to provide at least one additional monitor, an external keyboard and a mouse at their own expense. In addition, when the resource is working from their home location they must have a private office space and are not permitted to work in an open communal space. Internet connection must be hard-wired and suitable bandwidth to support the IT requirements of this role. If these conditions cannot be met within their home office space, the resource will transition to full time in office, and the hybrid option will no longer be available.
• The Agency systems cannot be accessed from outside the province of Ontario, and Agency assets including laptops and related equipment cannot be removed from the province of Ontario, without prior written approval from the Agency.
• Assignment Type: This position is currently listed as "Hybrid". The resource under this request will be required to work onsite as per Hiring Manager sole discretion.