MongoDB Specialist

Toronto 2 days agoContractor External
Negotiable
Job title :- MongoDB Engineering Specialist Location :-GTA, ON (Hybrid ) Overview: MongoDB Engineering Specialist – Create and document MongoDB standards and script the deployment package with distribution through Ansible. Responsibilities: MongoDB Engineering Standards Design replica set and sharded cluster topologies tailored to workload (R/W patterns, data growth, latency, multi-AZ/region). Schema and index design aligned with document modeling patterns (subdocuments, bucketization, extended reference, outlier pattern). Capacity planning (IOPS/CPU/RAM/Storage), performance tuning (indexes, query plans, connection pools, WT cache). Backup/restore strategy design Security hardening: RBAC, client certs/TLS, encryption-at-rest (KMIP/KMS), auditing, least-privilege, IP allowlists/NSGs, CIS benchmarks. Observability: metrics, logs, and tracing integrations (MongoDB exporters/agents). Release management & lifecycle: rolling upgrades, feature compatibility versions (FCV), patching cadence, maintenance windows. Ansible Automation (IaC for Databases) Build idempotent Ansible roles and collections-based playbooks for provisioning: OS hardening, users, packages, ulimits, sysctl MongoDB install, config (mongod.conf), TLS, replica sets, config servers, mongos, sharding User creation (app/admin), roles, indexes, parameters Rolling upgrades and patching Drift detection & remediation, config guardrails, and change safety (serial/rolling strategies, pre-checks, post-verify). Collaboration & Governance Partner with App teams for data modeling reviews and performance tuning. Define standards, runbooks, and design docs; conduct readiness and DR tests. Ensure compliance with security frameworks (SOC2/ISO27001/PCI/HIPAA as applicable). Minimum Qualifications • 5+ years administering MongoDB in production at scale (replica sets and sharded clusters). • 3+ years with Ansible (roles, collections, Molecule tests, CI/CD). • Strong Linux (RHEL/Ubuntu), networking, storage, and TLS/PKI fundamentals. • Scripting: Bash and/or Python for glue/ops tooling.