OBJECTIVE OF THE OFFICE/DEPARTMENT
This is a requisition for employment at the Pan American Health Organization (PAHO)/Regional Office of the World Health Organization (WHO)
Contractual Agreement:
Non-Staff - International PAHO ConsultantJob Posting:
March 27, 2026Closing Date:
April 6, 2026, 11:59 PM Eastern TimePrimary Location:
Off SiteOrganization:
ITS Information Technology ServicesSchedule:
Full timePURPOSE OF CONSULTANCY
This requisition is for a consultancy at the Pan American Health Organization (PAHO)/Regional Office of the World Health Organization (WHO).DESCRIPTION OF DUTIES:
The Information Technology Services Department (ITS) provides leadership and direction in the deployment of information and communication technologies and systems to support the Pan American Health Organization/Regional Office of the Americas of the World Health Organization (PAHO/WHO) in carrying out its mandate. ITS establishes and maintains strategies, policies, standards, and procedures to ensure the effective and efficient provision of information and communication services in a geographically dispersed environment.
The Pan American Health Organization (PAHO) is seeking an experienced Drupal Developer consultant to support the ITS Web Services team in the development, maintenance, and enhancement of PAHO's digital web presence. The consultant will contribute to a broad portfolio of web properties including seven (7) Drupal-based websites and approximately forty (40) additional sites, including static sites and applications built with Angular.js and React.js.
PAHO's combined web portfolio receives approximately 4 to 5 million visits per month, serving health professionals, researchers, government bodies, and the general public across the Americas and beyond. This level of traffic underscores the critical importance of site reliability, performance, security, and availability. The Drupal Developer must bring solid hands-on technical experience to maintain and enhance high-traffic, mission-critical public health web infrastructure.
The consultant will work within an agile, Kanban-driven development environment, contributing to incremental feature deployments, security-conscious development practices, and cross-functional collaboration with stakeholders, content managers, and the ITS security team.
The Drupal Developer consultant will be responsible for the following areas:
Develop, maintain, and enhance seven (7) Drupal websites across versions 9 through 11, including custom modules, themes, and content types.
Write and maintain PHP code for custom Drupal modules, hooks, APIs, and integrations, following Drupal and Symfony coding standards.
Develop and maintain Twig templates for Drupal theming, including custom template overrides, preprocess functions, and theme hooks.
Leverage Symfony components (HttpFoundation, EventDispatcher, DependencyInjection, Routing) within Drupal's architecture for back-end development.
Build and maintain custom Drupal plugins, services, and event subscribers using Drupal's object-oriented architecture and dependency injection container.
Develop and manage content architectures using Entity API, Field API, and custom entity types.
Design and implement Drupal Migrate API pipelines to import, transform, and validate content from legacy systems and external data sources.
Build and maintain RESTful and JSON:API endpoints within Drupal for headless or decoupled front-end consumption, applying proper authentication and caching strategies.
Configure and manage Drupal's configuration management system (CMI) — exporting, importing, and synchronizing configuration YAML across multi-dev, Dev, Stage, and Live environments.
Manage and optimize Drupal's caching architecture including Internal Page Cache, Dynamic Page Cache, Varnish, and Redis integration.
Perform Drupal core and contributed module updates, patch management, and version upgrades including major version migrations (e.g., Drupal 8 to 9, Drupal 9 to 10, Drupal 10 to 11).
Configure and manage Drupal site settings, user roles, permissions, workflows, and content moderation states.
Implement and maintain Views, Paragraphs, Layout Builder, Panels, Webforms, and other common Drupal components.
Administer Drupal cron jobs, Queue API workers, and background processing tasks.
Use Drush and Drupal Console for command-line site administration, code generation, database operations, and deployment automation.
Manage PHP dependencies and Drupal module installation using Composer, including version constraints, patches, and lock file management.
Support multilingual site configuration using Drupal's Language, Content Translation, Configuration Translation, and Interface Translation modules across PAHO's official languages.
Implement Drupal security hardening measures including input filtering, access controls, and module-level permission audits.
Develop and maintain static websites, Angular.js applications, and React.js applications across the ~40-site portfolio.
Build and refactor reusable UI components using React.js and Angular.js best practices.
Write clean, semantic HTML5, CSS3/SCSS, Bootstrap, and JavaScript (ES6+).
Ensure all web properties are responsive, accessible (WCAG 2.1 AA), and cross-browser compatible.
Manage front-end dependencies using npm or yarn; configure and maintain build pipelines using Webpack, Gulp, or Vite.
Optimize front-end performance including Core Web Vitals, image optimization, lazy loading, code splitting, and bundle size reduction.
Implement and maintain Google Analytics 4 and Google Tag Manager integrations, validating data layer configurations and conversion tracking.
Work within PAHO's Agile/Scrum framework using a Kanban board with stages: In Queue, In Progress, Testing, Ready for Production, and Live.
Participate in daily Scrum stand-ups to report progress, surface blockers, and coordinate team support.
Develop features on the designated multi-branch environment; provide stakeholders with gated testing links prior to integration.
Merge code into the Dev branch following successful stakeholder sign-off and automated Semgrep security scan clearance.
Follow the controlled Thursday production deployment schedule to ensure predictable, traceable releases.
Collaborate with the ITS security team during the security scanning and integration phases.
Manage site code, databases, and files across all Pantheon environments: Multi-Branch (Multidev), Dev, Test (Stage), and Live.
Leverage Pantheon's Git-based CI pipeline for automated builds, deployments, and environment promotion.
Sync databases and files between environments as required for testing and validation.
Use SFTP and Git-based workflows to develop and deploy code within the Pantheon environment.
Ensure Stage is used exclusively for final pre-production validation — no active development in this environment.
Adhere to secure coding standards and remediate vulnerabilities flagged by the Semgrep automated SAST/SCA scanner.
Collaborate with the ITS Security team to address and fix vulnerabilities identified during security scans.
Apply OWASP best practices in all development work, including protection against XSS, CSRF, SQL injection, and insecure direct object references.
Implement and maintain HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy); enforce HTTPS and manage SSL/TLS certificate provisioning.
Conduct dependency audits using Composer audit and npm audit as part of the development lifecycle.
Participate in code reviews, applying and following team coding standards and best practices.
Design, build, and document RESTful APIs; consume third-party REST/JSON APIs within Drupal and front-end applications.
Implement and manage Drupal's JSON:API and REST modules for headless and decoupled use cases.
Integrate with external services including authentication providers (OAuth 2.0 / SAML / SSO) and communication tools.
Handle API authentication, error handling, and response caching in a secure and performant manner.
Produce detailed API documentation covering endpoints, request/response schemas, and integration workflows.
Write and maintain unit tests, integration tests, and functional tests using PHPUnit and JavaScript testing frameworks (Jest, Cypress, or equivalent).
Conduct cross-browser and cross-device testing before promoting features from multi-branch to Dev.
Perform regression testing after each deployment to confirm existing functionality is unaffected.
Use accessibility auditing tools (Axe, WAVE, Lighthouse) to validate WCAG 2.1 AA compliance across all web properties.
Apply code linting and validation standards using ESLint, Stylelint, and PHPCS.
Collaborate with stakeholders during the gated testing phase to confirm acceptance criteria are met.
Work within Apache and/or Nginx web server configurations, including virtual hosts, .htaccess rules, redirects, and rewrite rules.
Manage environment-specific configuration files (settings.php, .env) across Pantheon environments.
Assist with DNS records, domain routing, and SSL certificate provisioning as needed.
Manage Composer-based dependency workflows including applying security advisories and module patches.
Monitor server logs (PHP error logs, Apache/Nginx access logs) to identify and resolve performance or error issues.
Write, optimize, and maintain MySQL queries for Drupal and other web applications.
Use phpMyAdmin for database administration, inspection, query execution, and troubleshooting across development and staging environments.
Manage database schema changes, migrations, and data integrity during deployments.
Assist with database performance tuning, slow query analysis, and backup verification.
Configure and manage CDN settings to optimize asset delivery, caching headers, and geographic distribution for PAHO web properties.
Configure and maintain Redis caching layers to optimize site performance and reduce database load.
Troubleshoot CDN-related issues including cache purging, origin pull configurations, and SSL/TLS certificate management.
Monitor and tune caching performance to ensure fast, reliable page delivery across PAHO's global audience.
Configure and maintain site search functionality using Apache Solr and Elasticsearch integrated with Drupal Search API.
Build and maintain search indexes, faceted search interfaces, and custom index configurations for PAHO content.
Troubleshoot search indexing issues and ensure newly published content is properly indexed and discoverable.
Monitor web application health using New Relic and Pantheon dashboards; proactively review PHP error logs, slow query logs, and CDN hit-rate reports.
Respond to site incidents including outages, performance regressions, and broken deployments — triage, isolate root cause, and coordinate rollback when necessary.
Set up and maintain alerting for critical error thresholds, uptime failures, and security events.
Configure and maintain transactional email delivery for Drupal sites using SMTP modules and providers (SendGrid, Campaign Monitor or equivalent).
Develop and maintain HTML email templates for system notifications, newsletters, and automated workflows.
Utilize AI-assisted development tools (Microsoft Copilot, GitHub Copilot) to accelerate development, code review, and documentation.
Apply AI tools responsibly, validating generated code for security, accuracy, and compliance with PAHO standards.
Stay current with emerging AI capabilities relevant to web development and propose practical applications to the team.
Receive and process web requests submitted through the Salesforce-integrated ticketing system.
Review incoming tickets for completeness: domain validation, URL specificity, description clarity, and correct issue type (QUICK TASK or PROJECT).
Maintain up-to-date ticket status, progress notes, decisions, and testing documentation throughout the lifecycle.
Communicate ticket status and blockers proactively to stakeholders and the team lead.
Produce and maintain clear technical documentation for all developed features, configurations, and processes.
Document deployment procedures, rollback steps, and environment-specific configuration notes.
Contribute to internal knowledge base articles, SOPs, and onboarding materials.
Ensure all tickets are documented with decisions, change rationale, and testing outcomes.
Bachelor's degree in Computer Science, Information Technology, Web Development, or a related field (or equivalent professional experience).
7 to 8 years of professional Drupal development experience, with demonstrated hands-on expertise across multiple Drupal versions in production environments.
Proven experience developing and maintaining Drupal 9/10/11 sites, including custom module development, theming, Entity API, Migrate API, and configuration management.
Experience supporting or executing Drupal major version migrations (e.g., Drupal 7 to 8/9, Drupal 8 to 9, Drupal 9 to 10).
Solid experience with PHP 7/8 and Symfony-based development patterns within Drupal.
Demonstrated experience with React.js and/or front-end frameworks in production applications.
Experience with REST API and JSON:API development, including third-party service integrations.
Experience with OAuth 2.0 / SAML / SSO authentication integrations.
Familiarity with Linux server administration and the LAMP stack (Linux, Apache, MySQL, PHP).
Experience with the Pantheon hosting platform and CI/CD pipeline management.
Prior work in an Agile/Scrum or Kanban development environment.
Experience with international organizations or non-governmental projects is an asset.
Domain/Skills & Technologies:
CMS / Drupal: Drupal 9/10/11, custom modules, themes, Twig, Entity API, Field API, Migrate API, CMI, Layout Builder, Paragraphs, Views, Panels, Webforms, Drush, Drupal Console, Composer, multilingual configuration
PHP & Frameworks: PHP 7/8, Symfony components (HttpFoundation, EventDispatcher, DependencyInjection, Routing), OOP, dependency injection, Twig templating, Drupal hooks, services, plugins, Queue API
Front-End: HTML5, CSS3/SCSS, Bootstrap, JavaScript ES6+, React.js, Angular.js, jQuery, responsive design, WCAG 2.1 AA, npm/yarn, Webpack/Gulp/Vite
APIs & Auth: RESTful API design and consumption, Drupal JSON:API, OAuth 2.0, SAML/SSO, third-party API integrations, error handling, response caching, API documentation
Testing & QA: PHPUnit, Jest, Cypress, cross-browser testing, regression testing, WCAG auditing (Axe, WAVE, Lighthouse), ESLint, PHPCS, Stylelint
Platform & Pipeline: Pantheon (Multidev, Dev, Test, Live), Git, CI/CD pipelines, SFTP workflows, Apache/Nginx, .htaccess, DNS, SSL/TLS
Security: Semgrep SAST/SCA, OWASP best practices, XSS/CSRF/SQLi prevention, HTTP security headers (CSP, HSTS, X-Frame-Options), Composer audit, npm audit, input filtering
Database & Admin: MySQL — queries, optimization, schema management, migrations; phpMyAdmin; slow query analysis
Caching & CDN: Redis, Varnish, Internal/Dynamic Page Cache, CDN configuration, cache purging, HTTP caching headers, Core Web Vitals optimization
Search: Apache Solr, Elasticsearch, Drupal Search API, faceted search, custom index configuration
Monitoring & Logging: New Relic, Pantheon dashboards, PHP error logs, Apache/Nginx access logs, slow query logs, uptime alerting, incident response
Email & Comms: SMTP, SendGrid, Mailchimp, SPF/DKIM/DMARC, HTML email templates, Drupal mail modules
Analytics: Google Analytics 4, Google Tag Manager, data layer validation, conversion tracking
AI & Dev Tools: Microsoft Copilot, GitHub Copilot, DDEV, phpMyAdmin, Kint, Devel, Drush
Agile / Workflow: Scrum, Kanban, sprint planning, daily stand-ups, ticket management (Salesforce or equivalent)
Documentation: Technical writing, deployment notes, SOPs, knowledge base articles, onboarding materials
Version Control: Git — branch management, merge requests, conflict resolution, multi-branch workflows
The following certifications are desirable and reflect the level of platform expertise expected for this role:
Certification/ Issuing Body
Acquia Certified Developer - Drupal 10 or 11/ Acquia
WebOps Certified Developer/Pantheon
LPI Linux Essentials/Linux Professional Institute
Any Drupal community training (e.g., Drupalize.me, Acquia Academy, university-issued)/Various
Experience with Drupal 11 upgrade paths, deprecation handling, and new platform features.
Familiarity with headless or decoupled Drupal architectures (React.js or Next.js consuming Drupal JSON:API).
Experience with Linux server administration — Apache/Nginx configuration, LAMP stack, system monitoring, and security hardening.
Familiarity with DDEV or Lando for local containerized Drupal development environments.
Experience with graphic design tools (Adobe Photoshop, Illustrator) for UI/UX asset production.
Knowledge of Bootstrap or other CSS frameworks for rapid front-end development.
Familiarity with Salesforce Service Cloud or similar ticketing/CRM platforms.
Experience working in international, academic, or non-governmental organization environments.
Continuous learning mindset — active engagement with Drupal community resources (Drupalize.me, Drupal.org, DrupalCon).
Professional working proficiency in English (written and spoken) — required.
Working knowledge of Spanish — desirable given PAHO's regional mandate.
Knowledge of French, Portuguese, or other languages — an asset.
Position: Drupal Developer Consultant
Salary: Band B of International PAHO Consultant (IPC-Band B)(range $5,160 - $6,280)
Duty station: Remote (Off-Site)
Duration: Until 31 December 2026
Reporting to ITS Web Services Team Lead
ADDITIONAL INFORMATION