Sr DevOps Engineer
About the role
This organization operates in the healthcare sector, focusing on episodes of care benefit plans. It addresses challenges in healthcare pricing transparency and efficiency by leveraging deep expertise in episode pricing and analytics. The program aims to provide high-quality, affordable healthcare through data-driven solutions.
The SR DEVOPS ENGINEER role is critical for maintaining and advancing the organization's cloud infrastructure and operational systems. The position involves owning and managing end-to-end production services, automating security and compliance processes, and developing internal tools to enhance operational efficiency. This role supports secure, compliant handling of protected health information and ensures reliable system performance, contributing directly to the organization's mission of delivering efficient healthcare solutions.
Responsibilities
- Build and maintain infrastructure-as-code using TypeScript AWS CDK across multiple platforms and accounts.
- Manage production services including ECS Fargate, Aurora, Lambda, API Gateway, S3, AWS Transfer Family, OpenSearch, and DMS replication.
- Implement and maintain observability tools such as CloudWatch alarms, Synthetics canaries, VPC flow logs, and CloudTrail.
- Automate security and compliance controls including Service Control Policies, IAM Identity Center permission sets, and evidence collection for SOC 2.
- Manage access systems like Okta SSO/SAML, SCIM provisioning, OpenVPN Access Server, and approval-based automation for VPN and AWS access.
- Develop internal operational tools, including chat-native bots and AI-powered applications.
- Enhance CI/CD workflows using GitHub Actions, CodePipeline, and deployment safety measures.
- Participate in on-call rotation for production infrastructure support.
Requirements
- Minimum 4 years experience in DevOps, SRE, platform, or cloud infrastructure engineering.
- Strong hands-on AWS knowledge including IAM trust policies, VPC networking, and cross-account access.
- Experience with Infrastructure-as-Code, preferably AWS CDK in TypeScript.
- Proficiency in production coding with TypeScript and/or Python.
- Ownership of CI/CD pipelines such as GitHub Actions or CodePipeline.
- Experience with AWS container services like ECS or EKS.
- Linux administration skills including shell fluency.
- Understanding of identity systems including SSO/SAML/OIDC and IAM best practices.
- Clear written communication skills for documentation and collaboration.