The Cloud Engineer (Automation) is responsible for designing, building, operating and improving production-grade automation for Smile Digital Health, its clients and partners. This role will be responsible for the pipelines, infrastructure as code, environments and recovery procedures, that the platform runs on.
This Engineer will merge direct platform engineering expertise with driving strategic changes in how the department designs, deploys, and maintains its infrastructure. Key responsibilities include managing build and release engineering, orchestrating the Terraform and Helm infrastructure, provisioning on-demand environments, and implementing automated recovery. This role works closely with Platform Engineering, Solution Engineering, Service Operations and Engineering Practice & QA to remove unnecessary repetitive, manual work and effectively optimize a build from the time the client commits to a running environment faster, decrease platform costs, and utilize AI to enhance the platform’s engineering and operations.
Responsibilities:
- Own build and release engineering by reviewing the current repositories and CI setup, then consolidate duplicated Azure DevOps pipeline YAML onto shared reusable templates with change detection and automated quality gates.
- Identify and eliminate manual efforts for cross-functional teams and replace them with scheduled, auditable automation. For example, automating patching, certificate and secret rotation, environment scaling, and recurring reports
- Implement GitOps-based continuous delivery - declarative, Git-driven deployments with automated reconciliation, drift detection and rollback.
- Automate line-of-business environments end to end, provisioned and torn down on demand across every Azure service and application involved.
- Automate business continuity and disaster recovery through backup validation, restore and failover, recurring DR drills, and measured RTO and RPO.
- Ensure Helm and Terraform are easy to upgrade by charting reuse and configuration validation, versioned modules, and state boundaries that limit how far an upgrade reaches.
- Run in-cluster platform services deployed through Helm, harden workloads for availability and capacity: health probes, replica counts, and right-sized requests, limits and autoscaling.
- Ensure that the Terraform configuration is regularly maintained.
- Build and maintain Build Agent images for streamlining tooling available for the builds.
- Automate the guardrails such as policy-as-code, security and IaC scanning in the pipeline, and alerts and dashboards defined as code.
- Implement AI-assisted engineering in the platform team’s day-to-day work
- Contribute to the department’s AI enablement, package knowledge into reusable skills and runbooks in the shared skill library.
- Work with the development and operations teams to find automation gaps, prioritize them, and close them.
- Troubleshoot production and staging issues and document what you automate so others can operate it.
Requirements:
- 6+ years of hands-on cloud engineering, DevOps and/or platform engineering experience, including at least 1-2+ years with infrastructure as code and CI/CD automation on Microsoft Azure in production.
- Post-secondary education in Computer Science, Engineering, or similar and/or equivalent work experience.
- Practical in-depth knowledge and expertise in Terraform, Helm and Azure DevOps pipelines, and GitOps delivery (Argo CD or Flux).
- Strong Terraform skills including, but not limited to, experience with module design, provider version management, state management and refactoring.
- Expertise in Helm chart authoring and refactoring, including recent experience with Kubernetes and AKS.
- Demonstrated knowledge across Azure (AKS, Key Vault, Storage, Azure SQL, PostgreSQL, networking, identity) and observability as code (Azure Monitor and/or Grafana, Prometheus, OpenTelemetry).
- Hands-on experience automating backup, restore and failover with measured RTO and RPO.
- Hands-on experience with agentic coding tools (Claude Code or equivalent), keeping confidential data out of them and reviewing what they produce.
- Hands-on experience running, hardening and right-sizing production workloads on Kubernetes
- Hands-on Kafka operations: topic and partition design, consumer group sizing, and throughput and latency trade-offs. Experience migrating between Kafka platforms (HDInsight, Confluent, MSK or self-managed) is a strong asset.
- Strong Python and Bash skills, able to build maintainable tooling, not glue scripts.
- A demonstrable record of replacing manual processes with automation.
- FinOps practice and Azure Cost Management, an asset.
- Regulated environment experience (healthcare, PHI), an asset.
- Certifications: HashiCorp Terraform Associate; Microsoft AZ-104, AZ-400, AZ-305; CKA or CKAD, an asset.
- Observability as code with Azure Monitor, Grafana, Prometheus, or OpenTelemetry; Azure cost optimization, an asset.
Skills Required
- 6+ years of hands-on cloud engineering, DevOps, or platform engineering experience
- 1–2+ years of infrastructure-as-code and CI/CD automation experience on Microsoft Azure in production
- Post-secondary education in Computer Science, Engineering, or a similar field, or equivalent work experience
- In-depth experience with Terraform, Helm, Azure DevOps pipelines, and GitOps delivery using Argo CD or Flux
- Strong Terraform skills, including module design, provider version management, state management, and refactoring
- Expertise authoring and refactoring Helm charts, with recent Kubernetes and AKS experience
- Knowledge of Azure services including AKS, Key Vault, Storage, Azure SQL, PostgreSQL, networking, and identity
- Experience with observability as code using Azure Monitor, Grafana, Prometheus, or OpenTelemetry
- Hands-on experience automating backup, restore, and failover with measured RTO and RPO
- Hands-on experience with agentic coding tools such as Claude Code or equivalent
- Experience running, hardening, and right-sizing production Kubernetes workloads
- Hands-on Kafka operations, including topic and partition design, consumer group sizing, and throughput and latency trade-offs
- Strong Python and Bash skills for building maintainable tooling
- Demonstrated experience replacing manual processes with automation
- Experience migrating between Kafka platforms such as HDInsight, Confluent, MSK, or self-managed Kafka
- FinOps practice and Azure Cost Management experience
- Experience in regulated environments such as healthcare or PHI
- HashiCorp Terraform Associate certification
- Microsoft AZ-104, AZ-400, or AZ-305 certification
- CKA or CKAD certification
What We Do
Smile Digital Health (doing business as Smile CDR Inc.) specializes in delivering fast, secure, compliant data infrastructures as a service to enable and empower interconnectivity for data-intensive sectors such as healthcare. We are a solutions platform helping organizations like governments, researchers, health systems, healthcare providers, and app developers build connected health solutions and products by leveraging our core expertise in health data and HL7 FHIR. Our flagship product, Smile CDR, is the world’s first FHIR-based clinical data repository (CDR) as a service. Smile CDR is a high performance and secure solution built on the principles of Privacy by Design. Flexibility is a hallmark of the service as it can be hosted in the cloud or on-premises depending on your needs. The design was strongly influenced by real-world experience in both the jurisdictional and organizational setting. Smile CDR provides a rich set of features and capabilities including: -Multiple FHIR versions -FHIR Profiles -Full text indexing of clinical records -Type ahead search functionality -FHIR, HL7v2 and custom ETL for data input -Federated identity and identity provider functionality -International character locale support -Terminology services -Auditing -Smart on FHIR support -Rapid deployment -Extensive administrative tooling Leveraging more than 40 years of experience in building enterprise-class systems, our team includes experts in building integrated healthcare systems including FHIR-based solutions such as HAPI, e-prescriptions and other e-health solutions. We were motivated by the need to improve upon existing options for sharing health data within and across organizations. Smile CDR is the maintainer of HAPI FHIR, the prevailing open source reference implementation of FHIR worldwide
