DevOps Engineer - Onsite

**DevOps Engineer** **Location\- Toronto, Canada (Onsite)** **Duration\- 1 year Contract** **Experience\- 5\-8years** **Infrastructure as Code (IaC) Development \& Management:** * Design, develop, and maintain reusable Terraform modules and Ansible playbooks/roles for provisioning and configuring cloud resources across AWS, Azure, OCI, and GCP. * Implement and manage IaC pipelines for automated infrastructure deployment, updates, and decommissioning. * Ensure IaC practices adhere to security policies, compliance requirements, and industry best practices. **Automation \& CI/CD:** * Develop and enhance CI/CD pipelines for both infrastructure and application deployments, integrating security best practices. * Automate routine operational tasks, security checks, and compliance reporting .i.e golden image baking. * Script solutions for automation tasks using languages like Python, bash, and Ansible tool. **Cloud Security \& Governance:** * Research for security best practices from vendor recommendations, Implement and manage cloud security controls, including IAM (roles, policies, service principals), network security (Security Groups, NSGs, WAFs), data encryption, and secrets management. * Define and enforce security policies and compliance standards (e.g., CIS Benchmarks, SOC 2, NIST) using Policy as Code \& IAC tools where applicable. * Support security assessments and vulnerability scans on cloud infrastructure. * Respond to and remediate security incidents and vulnerabilities. **Multi\-Cloud Platform Expertise:** * Provide expert\-level support and guidance for infrastructure on AWS, Azure, OCI, and GCP. * Design and implement secure and scalable network architectures (VPCs/VNets, subnets, routing, load balancing, DNS) in multi\-cloud environments. * Optimize cloud resource utilization and costs. **Collaboration\& Mentoring:** * Collaborate closely with development, operations, and security teams to foster a DevSecOps culture. * Provide technical guidance and mentorship to junior team members. * Document infrastructure designs, configurations, and operational procedures.