DevOps and Cloud Engineer

Job Title: DevOps/Cloud Engineer - Senior

Work Model: Hybrid

Duration: 6 Months

Extension: 1 Time

Project Description

The Agency requires a Senior DevOps and Cloud Engineer to support the Enterprise Pub/Sub Applications Team. The resource will build, deploy, operate, and maintain AWS infrastructure and application environments supporting Enterprise Pub/Sub integrations and related The Agency applications. The work includes serverless applications, containerized services, API integrations, identity and access controls, observability, operational support, and repeatable infrastructure provisioning.

Must Haves

• Advanced AWS CDK and CloudFormation experience, including CDK development in Python and JavaScript, reusable constructs, stack architecture, dependencies, parameters, outputs, environment configuration, deployment controls, and rollback. 25 Points
• AWS Lambda and API Gateway engineering experience, including deployment, integrations, triggers, runtime configuration, permissions, authentication, concurrency, timeouts, logging, monitoring, error handling, and production troubleshooting. 25 Points
• Amazon ECS, Application Load Balancer, and NextGen Connect administration experience supporting Java and Python container applications and integration channels, including images, task definitions, services, channel deployment

Description / Responsibilities / Skills

Responsibilities

• Create and maintain IAM roles, policies, resource policies, service permissions, trust relationships, and least-privilege access controls,
• Manage application networking and connectivity requirements, including VPCs, subnets, route tables, security groups, endpoints, DNS,
• Implement operational visibility using structured logs, metrics, dashboards, alerts, traces, audit records, health monitoring, and diagnostic tooling
• Respond to incidents, perform root-cause analysis, implement corrective actions, maintain runbooks and technical documentation,

Knowledge Transfer Details

• The resource will ensure full knowledge transfer is provided to the Agency team before end of engagement.
• Key deliverables will be shared with team.
• A walkthrough of any demos, development, etc. will be required before the end of the engagement.

Deliverables

• IAM roles, policies, resource policies, trust relationships, service permissions, access reviews, least-privilege controls, and documented resolution of authorization failures.
• Cloud networking, connectivity, logging, metrics, dashboards, alerts, tracing, audit, availability, capacity, and security configurations required to operate the assigned services.
• Automated build and deployment workflows, infrastructure validation, environment promotion, configuration controls, release evidence, rollback procedures, and operational-readiness records.
• Incident investigations, root-cause analyses, corrective actions, troubleshooting guides, architecture and configuration documentation, operating procedures, runbooks, and knowledge-transfer materials.

Experience & Skill Set Requirements

Rated Criteria

• AWS cloud operations and security experience, including IAM roles and permissions, least-privilege policies, VPC networking, security groups, observability,
• incident response, root-cause analysis, infrastructure automation, and operational documentation. 25 Points
• Total: 100 Points

Required Skills

• Senior-level AWS cloud engineering and DevOps experience building, operating, and troubleshooting production serverless, containerized,
• networking, security, and shared platform resources and experiencing managing NextGen Connect (Mirth) in a containerized AWS environment.
• Strong AWS identity and access management experience, including IAM roles, policies, resource policies, service roles, permission boundaries, least-privilege
• access diagnostics, and secure management of application permissions.

Desired Skills

• Experience with event-driven AWS services such as Amazon SQS, Amazon SNS, Amazon EventBridge, dead-letter queues, event-source mappings, retries,
• and asynchronous failure handling.
• Experience with Amazon ECR, ECS on AWS Fargate, and NextGen Connect deployments, including channel and configuration promotion, clustering,
• service auto scaling, deployment circuit breakers, blue-green or rolling deployments, and container security practices.
• Experience with Amazon CloudWatch, AWS CloudTrail, distributed tracing, log analysis, operational dashboards, alerting, service-level indicators,
• and production incident response.
• Experience managing secrets, encryption keys, certificates, parameterized configuration, security scanning, vulnerability remediation, and secure application connectivity.
• Experience supporting healthcare integration platforms, FHIR APIs, publish-and-subscribe workflows, or other regulated environments
• with privacy, audit, security, and availability requirements.