DevOps Engineer III

We are looking for a skilled DevOps Engineer to help build, maintain, and scale our cloud infrastructure and deployment pipelines. In this role, you will be the backbone of our engineering delivery, ensuring that our applications are highly available, secure, and deployable at a moment's notice. You will take ownership of our containerized environments using Docker and Kubernetes (EKS), manage our cloud resources in AWS as code with Terraform, and streamline our CI/CD workflows using GitHub Actions.

Our platform supports healthcare operations, so protecting patient data is part of everything we build. You will work independently while partnering closely with our engineers, supporting both the applications we build and a growing set of self-hosted open-source tools. If you are passionate about automating manual processes, eliminating downtime, and building resilient systems that never depend on a single person, this is the role for you.

1. Cloud Infrastructure & Architecture

• AWS Management: Provision, configure, and maintain scalable cloud infrastructure across various AWS services (e.g., EC2, RDS, S3, VPC, IAM).
• Infrastructure as Code: Own our Terraform and Terragrunt codebase across AWS, Cloudflare and GitHub. Keep environments reproducible, secure, version-controlled and changed only through reviewed pull requests.
• Account and environment structure: Plan and carry out changes to our AWS account structure, including moving selected workloads and data between accounts with no data loss and minimal downtime.
• Security & Compliance: Enforce security best practices across our cloud environments, including access control, network security and encryption. Help keep our infrastructure HIPAA compliant and support SOC 2 work.

2. Containerization & Orchestration

• Kubernetes Administration: Deploy, manage, upgrade and scale our EKS clusters. Ensure high availability, proper resource allocation and good performance for our services.
• Dockerization: Work closely with software engineers to containerize applications, optimizing images for size, security and build speed.
• Self-hosted open-source applications: Run, upgrade and secure the open-source tools we host ourselves (for example, CRM, analytics, workflow automation and internal databases). Help engineering decide when to self-host and when to use a managed service.

3. CI/CD & Automation

• Pipeline Development: Design, build, and maintain robust Continuous Integration and Continuous Deployment (CI/CD) pipelines using GitHub Actions, including self-hosted runners.
• Release Engineering: Automate testing, staging, and production deployments to ensure smooth, zero-downtime releases.
• Process Automation: Identify bottlenecks in the development lifecycle and write scripts to automate repetitive operational tasks.

4. Monitoring, Logging & Reliability

• Observability: Run our monitoring, alerting, logging and tracing so we can see system health and performance, while keeping PHI out of telemetry.
• Backups and recovery: Own database backups and disaster recovery, and regularly test that restores actually work.
• Incident Response: Participate in an on-call rotation to troubleshoot and resolve production issues, conducting blameless root cause analyses (RCAs) to prevent recurrence.

5. Collaboration and shared ownership

• Partner with engineering: Work independently day to day, in close collaboration with our engineers on architecture, reviews and priorities.
• Avoid single points of failure: Keep runbooks and documentation current, train at least one backup for each critical system, and make sure there are break-glass access procedures.
• Enable self-service: Give engineers safe, scoped ways to deploy and operate their own services without waiting on you.

• Experience: 5+ years of hands-on experience in a DevOps, Site Reliability (SRE) or Cloud Engineering role, including owning production infrastructure.
• Infrastructure as Code: Production experience managing infrastructure with Terraform (Terragrunt, Pulumi or CloudFormation experience also counts). This includes state management, imports, refactoring without downtime, and reviewing plans as part of pull requests.
• Cloud expertise: Strong production experience running infrastructure in AWS, including IAM, networking and managed databases.
• Container orchestration: Deep understanding of Docker, and production experience running Kubernetes (EKS preferred), including Helm, networking, upgrades and scaling.
• CI/CD: A track record of building complex, automated pipelines in GitHub Actions, including secure cloud authentication (OIDC).
• Networking fundamentals: Solid understanding of cloud networking: DNS, load balancing, VPCs, subnets, security groups and private connectivity.
• Scripting: Strong Python or Bash skills for automating operational work.
• Independent ownership: A history of being the primary owner of infrastructure while working closely with application engineers. You document your work, share knowledge and design things so no system depends on you alone.

• Healthcare and HIPAA: Experience running infrastructure that handles PHI in a HIPAA-regulated environment. That includes encryption, access logging, retention and working with vendors under BAAs.
• Self-hosted open source: Experience running third-party open-source apps in production, including version pinning, upgrades with database migrations, and rollbacks.
• Multi-account AWS: Experience with AWS Organizations, or with moving workloads and data between AWS accounts.

• SOC 2: Experience preparing for or supporting a SOC 2 audit, especially automating evidence collection.
• Observability tools: Experience with the Grafana stack (Loki, Tempo, Mimir), Prometheus, OpenTelemetry or similar.