Research Platform Cloud Designer -Information Technologies

This fixed-term position is for a Research Platform Cloud Designer to architect and implement Infrastructure as a Service (IaaS) solutions for researchers, collaborating with IT teams and users to meet business and security needs. Key responsibilities include requirements gathering, platform design using AWS, policy development, and implementation through Infrastructure as Code. A minimum of five years of related experience and preferred AWS certifications are required.

• This position will support the use of Infrastructure as a Service (IaaS) by consulting with researchers to help them choose an appropriate IaaS solution between local infrastructure, Digital Research Alliance of Canada (DRAC) infrastructure or commercial providers such as Amazon Web Services (AWS).
• Architecting and designing a research platform that will meet the business and security requirements.
• Close collaboration across teams and with researchers is essential.
• Summary of Key Responsibilities (job functions include but are not limited to):
• In conjunction with other IT teams, and researchers, gather and document requirements for needed research platforms.
• Identify any potential problems with, or resources needed to meet the requirements of the research platform.
• Architect, design, and produce a formal system design for the research platform which is expected to meet the requirements of the operational groups within IT, such as Data Centre
• Facility Operations, Server and Network Operations, Cloud Operations, Application Support Services, and the Support Centre.
• Working with other IT teams implement the research platform. This could include acting as a liaison between the researcher and other IT teams.
• Develop AWS Service Control Policies and AWS Resource Control Policies appropriate for the research platform.
• Develop Policy-As-Code appropriate for the research platform.
• Develop Configuration-drift detection appropriate for the research platform.
• Evaluate existing cloud deployments for technical or security compliance and make recommendations as to the use or modification of the existing deployment in a production research platform.
• Evaluate and mitigate risks arising from the infrastructure design, software architecture, or application security of research platforms. Develop tests and technical implementations of evaluation criteria used for security and privacy audits of research platforms.
• Research Platform Implementation
• Deploy, Configure, Test, and Document existing research software or utilities for use in production research platforms, including creation of Infrastructure as Code, Policy-as-code, AWS
• Service Control Policies, AWS Resource Control Policies, Configuration-drift detection, and others where appropriate.
• Evaluate existing research software, platforms, Infrastructure as Code, Policy-as-code, AWS Service Control Policies, AWS Resource Control Policies, Configuration-drift detection, and others, for technical or security compliance and make a recommendation as to the use or modification of these in a production research platform.
• Training and In-Scope Supervision
• Develop and Provide custom training on cloud architecture and uses for researchers on a regular basis.

• Minimum of five years of recent and directly related experience.
• AWS Certified Solutions Architect Professional certificate is preferred.
• Experience with designing and deploying systems in Cloud environments such as AWS.
• Experience with AWS Control Tower.
• Experience with AWS Service Control Policy Development.
• Experience with AWS Resource Control Policy Development.
• Experience with Policy-As-Code Development.
• Experience with Configuration-drift Detection Development.
• Experience deploying and maintaining IaaS and Container solutions.
• Excellent understanding of Infrastructure as Code (IaC) technologies such as Ansible and Terraform.
• Experience with administration of Linux OS and software on x86-64 Linux systems.
• Experience mitigating results from security audits, penetration tests, or privacy assessments.
• Working knowledge of network technologies such as DNS, DHCP, TCP/IP, routing, firewalls.
• Ability to discuss networking technologies (load balancers, firewalls, routers, switches).
• Ability to discuss distributed systems concepts such as message brokers, RPC.
• Ability to discuss storage technologies (Object Store, File Storage).
• Ability to discuss and use storage protocols (S3, NFS, SMB/CIFS).
• Ability to discuss and use Linux filesystem permissions.
• Ability to discuss and use IAM users, roles, and policies.
• Effective time management skills with ability to prioritize and meet competing deadlines.