DevOps Engineer III

Role Overview We are looking for a skilled DevOps Engineer to help build, maintain, and scale our cloud infrastructure and deployment pipelines. In this role, you will be the backbone of our engineering delivery, ensuring that our applications are highly available, secure, and deployable at a moment's notice. You will take ownership of our containerized environments using Docker and Kubernetes (EKS), manage our cloud resources in AWS as code with Terraform, and streamline our CI/CD workflows using GitHub Actions. Our platform supports healthcare operations, so protecting patient data is part of everything we build. You will work independently while partnering closely with our engineers, supporting both the applications we build and a growing set of self-hosted open-source tools. If you are passionate about automating manual processes, eliminating downtime, and building resilient systems that never depend on a single person, this is the role for you.

Key Responsibilities 1. Cloud Infrastructure & Architecture AWS Management: Provision, configure, and maintain scalable cloud infrastructure across various AWS services (e.g., EC2, RDS, S3, VPC, IAM). Infrastructure as Code: Own our Terraform and Terragrunt codebase across AWS, Cloudflare and GitHub. Keep environments reproducible, secure, version-controlled and changed only through reviewed pull requests. Account and environment structure: Plan and carry out changes to our AWS account structure, including moving selected workloads and data between accounts with no data loss and minimal downtime. Security & Compliance: Enforce security best practices across our cloud environments, including access control, network security and encryption. Help keep our infrastructure HIPAA compliant and support SOC 2 work. 2. Containerization & Orchestration Kubernetes Administration: Deploy, manage, upgrade and scale our EKS clusters. Ensure high availability, proper resource allocation and good performance for our services. Dockerization: Work closely with software engineers to containerize applications, optimizing images for size, security and build speed. Self-hosted open-source applications: Run, upgrade and secure the open-source tools we host ourselves (for example, CRM, analytics, workflow automation and internal databases). Help engineering decide when to self-host and when to use a managed service. 3. CI/CD & Automation Pipeline Development: Design, build, and maintain robust Continuous Integration and Continuous Deployment (CI/CD) pipelines using GitHub Actions, including self-hosted runners. Release Engineering: Automate testing, staging, and production deployments to ensure smooth, zero-downtime releases. Process Automation: Identify bottlenecks in the development lifecycle and write scripts to automate repetitive operational tasks. 4. Monitoring, Logging & Reliability Observability: Run our monitoring, alerting, logging and tracing so we can see system health and performance, while keeping PHI out of telemetry. Backups and recovery: Own database backups and disaster recovery, and regularly test that restores actually work. Incident Response: Participate in an on-call rotation to troubleshoot and resolve production issues, conducting blameless root cause analyses (RCAs) to prevent recurrence. 5. Collaboration and shared ownership Partner with engineering: Work independently day to day, in close collaboration with our engineers on architecture, reviews and priorities. Avoid single points of failure: Keep runbooks and documentation current, train at least one backup for each critical system, and make sure there are break-glass access procedures. Enable self-service: Give engineers safe, scoped ways to deploy and operate their own services without waiting on you.