About this role
Job Description
Required Experience
- Senior-level experience building GitHub Actions workflows for application and infrastructure deployment, environment promotion, approvals, testing, rollback, and secure authentication to AWS.
- Strong hands-on experience developing AWS CDK infrastructure in Javascript and python, including reusable constructs, stack composition, configuration, testing, synthesis, deployment, and CloudFormation troubleshooting.
- Strong experience deploying and operating Docker workloads on Amazon ECS with AWS Fargate and Amazon ECR, including task definitions, services, load balancing, scaling, logging, health checks, and container troubleshooting.
- Strong AWS networking and security experience covering VPCs, public and private subnets, route tables, NAT, VPC endpoints, DNS, security groups, IAM roles, AWS KMS keys, and AWS Glue job networking.
- Hands-on experience provisioning and supporting AWS Glue, Amazon Data Firehose, AWS DMS, Amazon CloudFront, Amazon S3, AWS WAF, EC2 launch templates, and EC2 Auto Scaling groups.
Responsibilities
- Work with OCRE architecture, development, data, security, privacy, QA, and operations stakeholders to define infrastructure, deployment, networking, availability, monitoring, and support requirements.
- Design and maintain GitHub Actions workflows that build, test, scan, package, provision, deploy, promote, and roll back OCRE application and infrastructure changes across controlled environments.
- Develop and maintain AWS CDK applications in Java for repeatable provisioning of OCRE cloud infrastructure, configuration, permissions, monitoring, and deployment dependencies.
- Provision and configure AWS Glue jobs, connections, triggers, roles, encryption settings, and network access, and troubleshoot ENI creation, subnet capacity, DNS, routing, security-group, NAT, and VPC-endpoint issues.
- Provision and support Amazon Data Firehose delivery streams and AWS DMS replication instances, endpoints, subnet groups, tasks, table mappings, logging, monitoring, and connectivity.
- Deploy, configure, scale, monitor, and troubleshoot Amazon ECS services on AWS Fargate, including Docker images, Amazon ECR, task definitions, secrets, health checks, load balancers, target groups, logs, and resource limits.
- Provision and operate serverless frontend infrastructure using Amazon S3, Amazon CloudFront, AWS WAF, certificates, DNS configuration, cache policies