Full-Stack Cloud Engineer

GAL AeroStaff Ltd. is a Canadian aerospace company specializing in delivering high-quality technical and operational services to the aviation industry. Our expertise includes aircraft interior, structural, manufacturing, and maintenance solutions for OEMs, MROs, and operators across North America.We offer carefully designed programs and benefits, including time-off, insurance, and other plans, to support our teams and meet evolving operational and regulatory requirements.Project Purpose:Full-Stack Cloud Engineer – AppX, for the purpose ofdevelopment, security, and operationsacross all cloud applications, databases, and infrastructure in the IT AppX organization.Ensure thecontinuous availability, performance, security, and scalabilityof 100+ AppX cloud-hosted applications by proactively managing cloud infrastructure, developing robust automation and monitoring, performing routine maintenance, and implementing improvements aligned with business and technical requirements (including but not limited to instance types, right-sizing, storage volume types, backup options, etc.).This includes managing existing applications, performing new application migrations from on-prem to cloud, migrating between hosting environments and tools, and onboarding accounts/applications obtained through M&A.ONSITE24/7 phone support (on a rotational basis)Contract length: 6–12 months (extendable)CTQ Business RequirementsIdentify all critical-to-quality ("CTQ") business requirements:Infrastructure ManagementProvision and manage cloud services, including the following for AWS:EC2 for compute workloadsECS/EKS for container orchestrationLambda/SNS/SQS/EventBridge for serverless workloadsS3/EFS/EBS for object and file storageDataSync, Storage Gateway, and other services for data synchronizationRDS/Aurora/DocumentDB/DynamoDB for relational databasesCloudFront/Route 53 for content delivery and DNSELB/VPC configurations for high availability and fault toleranceManage all cloud infrastructure changes through OpenTofu/Terraform.Define and implement necessary architectural changes, reviewing with leadership.Manage and optimize infrastructure spend by applying FinOps best practices.Forecast and seek approval for growth needed to meet business requirements.Work closely with development teams to implement infrastructure solutions and cloud-native services that meet their needs and minimize operational overhead.Attend Wabtec cloud, security, and shared service meetings to stay aware of best practices, new strategic initiatives, and required changes for all applications.Support infrastructure deployments on-prem, multi-region, and multi-cloud (AWS, Azure, OCI, etc.) to enable future application growth and resiliency.Define, implement, and manage one-time or recurring data transfers and synchronizations across platforms as needed.Maintenance & UpkeepApply regular OS, application, and database updates to keep systems up to date.Rotate EC2 AMIs and credentials (keys, passwords) per Wabtec security policy.Perform scheduled backups, monitor job statuses, and ensure recovery testing.Optimize performance through proactive right-sizing, scaling, and system upgrades.Security & ComplianceAdhere to Customer's ITIL, PMO, and change control processes.Ensure all configuration items are accurately detailed and maintained in CMDB.Present all projects and architectural changes to domain, organization, and enterprise Demand reviews.Obtain approval for all changes through domain, organization, and enterprise CAB reviews.Enforce IAM best practices including least privilege, MFA, and role-based access.Use Wiz, Tenable, and other security tools for continuous compliance and threat detection.Encrypt data at rest and in transit using KMS and TLS.Conduct regular security reviews and participate in internal audits, including quarterly and yearly SOX reviews for financial applications.Define, implement, and maintain disaster recovery plan and execute at least twice annually. Focus on reducing manual work through automation.Integrate infrastructure and application components with Customer core services (as deemed necessary):Identity– Active Directory, Okta, Sailpoint, CyberArk, etc.Network– DNS, Imperva, SSL certs, FW rules, etc.CI/CD & AutomationDefine, implement, and maintain:CI/CD pipelines to build/test/upload/deploy code with GitLab RunnerIntegration with code quality and security tools, including SAST and DASTDocker images for CI/CD pipelinesChef cookbooks/roles for configuration management and automation of all EC2 instancesServe as Owner/Maintainer for multiple GitLab organizations and oversee all version control, issue tracking, and deployment workflows.Automate routine tasks with GitLab Runner pipelines and other tools.Monitoring & ReportingDefine, implement, and maintain:Monitoring KPIs using Amazon CloudWatch, Datadog, Grafana (LGTM), etc.Dashboards for system metrics and alerts to reduce downtimeRegular executive reports on uptime, performance, and incidentsRecommend proactive improvements based on usage patterns and analytics.Maintain thorough documentation and detailed SOPs for all deliverables.Assist with training and onboarding of developers and additional support resources.Provide 24x7 on-call support for all infrastructure, database, CI/CD, automation, and application-related issues.Perform RCA and problem resolution for all incidents.