About the Role
One of our customers is building a HIPAA-compliant healthcare platform and seeking a Senior DevOps Engineer to own our AWS infrastructure end-to-end. You'll design and implement secure, scalable cloud architecture handling sensitive health data. This role combines hands-on technical work with strategic ownership of our infrastructure, security posture, and compliance requirements.
Key impact areas:
Architect and maintain HIPAA.
Compliant AWS infrastructure.
Build and optimize CI/CD pipelines for multiple services.
Own observability, incident response, and reliability.
Lead disaster recovery planning and compliance audits.
Mentor engineers and establish DevOps best practices.
Tech stack: AWS (ECS Fargate, RDS PostgreSQL, Cognito, S3, KMS), Terraform, GitHub Actions, Docker, Python.
You'll work closely with engineering, security, and compliance teams to ship a platform that handles PHI with the highest security standards.
Responsibilities
Design and implement VPC architecture, security groups, and network segmentation for HIPAA compliance.
Manage RDS PostgreSQL clusters (Multi-AZ, read replicas, backups, performance tuning).
Build and maintain ECS Fargate deployments with auto-scaling.
Own Terraform infrastructure-as-code across dev, staging, and production.
Implement CI/CD pipelines with GitHub Actions (build, test, deploy, approval gates).
Configure WAF, KMS encryption, Secrets Manager, and Cognito authentication.
Set up CloudWatch monitoring, alerting, and distributed tracing.
Lead incident response, post-mortems, and reliability improvements.
Manage cloud costs, Reserved Instances, and optimization initiatives.
Conduct DR testing and maintain documented recovery procedures.
Support HIPAA audits with evidence collection and compliance documentation.
Mentor team members and improve developer experience.
Required Qualifications
6+ years of hands-on AWS experience in production environments.
Expert Terraform skills (modules, remote state, multi-environment).
Strong experience with ECS/Fargate or Kubernetes container orchestration.
RDS PostgreSQL administration and performance optimization.
CI/CD pipeline design (GitHub Actions, GitLab CI, or similar).
Docker containerization and local development environments.
Security-first mindset: IAM, KMS, encryption, least-privilege design.
Monitoring and observability (CloudWatch, Datadog, or similar).
Incident management and on-call experience.
Strong documentation and communication skills.
Preferred Qualifications
Healthcare or HIPAA compliance experience.
SOC 2, HITRUST, or other compliance framework exposure.
CloudTrail audit logging and compliance evidence collection.
BAA vendor management experience.
Redis/ElastiCache for caching and session management.
Performance testing (k6, Locust).
Multi-region DR architecture.
Python or Go scripting for automation.
AWS certifications (Solutions Architect Pro, Security Specialty).
Experience in regulated industries (healthtech, fintech, govtech).