Senior DevOps Engineer (AWS/HIPAA)

Описание

About the Role

One of our customers is building a HIPAA-compliant healthcare platform and seeking a Senior DevOps Engineer to own our AWS infrastructure end-to-end. You'll design and implement secure, scalable cloud architecture handling sensitive health data. This role combines hands-on technical work with strategic ownership of our infrastructure, security posture, and compliance requirements.

Key impact areas:

• Architect and maintain HIPAA.

• Compliant AWS infrastructure.

• Build and optimize CI/CD pipelines for multiple services.

• Own observability, incident response, and reliability.

• Lead disaster recovery planning and compliance audits.

• Mentor engineers and establish DevOps best practices.

• Tech stack: AWS (ECS Fargate, RDS PostgreSQL, Cognito, S3, KMS), Terraform, GitHub Actions, Docker, Python.

• You'll work closely with engineering, security, and compliance teams to ship a platform that handles PHI with the highest security standards.

Responsibilities

• Design and implement VPC architecture, security groups, and network segmentation for HIPAA compliance.

• Manage RDS PostgreSQL clusters (Multi-AZ, read replicas, backups, performance tuning).

• Build and maintain ECS Fargate deployments with auto-scaling.

• Own Terraform infrastructure-as-code across dev, staging, and production.

• Implement CI/CD pipelines with GitHub Actions (build, test, deploy, approval gates).

• Configure WAF, KMS encryption, Secrets Manager, and Cognito authentication.

• Set up CloudWatch monitoring, alerting, and distributed tracing.

• Lead incident response, post-mortems, and reliability improvements.

• Manage cloud costs, Reserved Instances, and optimization initiatives.

• Conduct DR testing and maintain documented recovery procedures.

• Support HIPAA audits with evidence collection and compliance documentation.

• Mentor team members and improve developer experience.

Required Qualifications

• 6+ years of hands-on AWS experience in production environments.

• Expert Terraform skills (modules, remote state, multi-environment).

• Strong experience with ECS/Fargate or Kubernetes container orchestration.

• RDS PostgreSQL administration and performance optimization.

• CI/CD pipeline design (GitHub Actions, GitLab CI, or similar).

• Docker containerization and local development environments.

• Security-first mindset: IAM, KMS, encryption, least-privilege design.

• Monitoring and observability (CloudWatch, Datadog, or similar).

• Incident management and on-call experience.

• Strong documentation and communication skills.

Preferred Qualifications

• Healthcare or HIPAA compliance experience.

• SOC 2, HITRUST, or other compliance framework exposure.

• CloudTrail audit logging and compliance evidence collection.

• BAA vendor management experience.

• Redis/ElastiCache for caching and session management.

• Performance testing (k6, Locust).

• Multi-region DR architecture.

• Python or Go scripting for automation.

• AWS certifications (Solutions Architect Pro, Security Specialty).

• Experience in regulated industries (healthtech, fintech, govtech).