DevOps Engineer (Contract)

Job description

**Your Opportunity** We’re looking for a DevOps Engineer who builds, solves problems, and multiplies the impact of everyone around them. You’ll own infrastructure-as-code with Terraform, apply site reliability practices that keep our platforms stable and observable, and build the resilient systems our data and application teams rely on. You’ll do your best work on our small, growing team, where people ship quickly and support one another. This is a chance to help shape a leading healthcare technology company. **Infrastructure & Cloud Engineering** - Design, provision, and operate AWS infrastructure with infrastructure as code (Terraform), including reusable modules and environment-specific configurations - Configure and harden core AWS networking and security constructs, including VPCs, subnets, routing, NACLs, security groups, IAM roles and policies, KMS keys, and parameter and secret management - Implement and operate containerized services with Docker and AWS ECS/Fargate, including image pipelines, task definitions, service autoscaling, and blue-green or rolling deployments - Build and maintain serverless services with AWS Lambda and API Gateway, including event-driven integrations with EventBridge and S3 - Manage and operate Databricks infrastructure on AWS, including cluster configuration, workspace management, PrivateLink networking, and identity federation - Design and implement isolated development sandbox environments for secure data job execution **Reliability, Monitoring & Incident Response** - Implement comprehensive monitoring, logging, and alerting in CloudWatch (metrics, logs, dashboards, alarms) and integrate alerts with incident channels - Participate in production support including on-call responsibilities as needed, and drive post-incident reviews and reliability improvements - Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to policy **CI/CD & Deployment** - Build, maintain, and optimize CI/CD pipelines in GitHub Actions for infrastructure (Terraform workflows),applications (container, serverless, and data jobs) and agent deployments - Adhere to the Change Management policy, including documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment - Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices **Documentation & Operational Standards** - Document architecture, runbooks, and standard operating procedures for build, release, disaster recovery, and incident response - Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices **AI & Governance** - Support AI/ML platform enablement with AgentCore infrastructure, governance controls, and access patterns - Implement infrastructure for AI-powered operational tools (e.g., self-healing systems, security vulnerability remediation agents) **Security & Compliance** - Coordinate with the Information Security team to securely configure and maintain applications with secure authentication mechanisms, role-based access, and support for access reviews in accordance with the Identity Management Authentication and Access Control and Data and Platform Security policies - Adhere to the Change Management policy, which includes documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment; submit a change request, ensure an information security impact assessment is completed, coordinate pre-implementation activities, and ensure approvals are in place prior to implementation - Maintain accountability for secure software development practices, including secure coding standards, vulnerability scanning, and remediation prior to production deployment - Apply hardening standard configurations in conjunction with Information Security and ensure vulnerabilities are remediated in accordance with the Vulnerability Management policy - Ensure firewall configurations align with Data and Platform policy, including documentation with justifications for all rule changes, removal of obsolete rules, and participation in Information Security firewall rule reviews - Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to Vytalize policies - Maintain accurate and up-to-date inventories of hardware, software, and cloud assets throughout their lifecycle from acquisition to decommissioning, ensuring assets are classified, assigned to owners, tracked in approved systems, and aligned with Information Security policies **PREFERRED QUALIFICATIONS** - On-call experience and comfort with incident response, including runbook creation and post-incident analysis - Experience with policy-as-code and guardrails (e.g., SCPs, IAM boundaries, OPA/Conftest) - Familiarity with secrets management and parameterization (AWS Secrets Manager, SSM Parameter Store) - Experience with AWS EKS / Kubernetes deployment and operations - Exposure to cost optimization, tag policies, and FinOps practices - Federated identity and access management: OIDC, SAML, Entra ID, Cognito, and workload identity federation for CI/CD - Databricks experience (clusters, jobs, permissions, metastores) and integration with cloud networking and identity - Streaming and data pipeline experience with Kinesis, EventBridge Scheduler, or equivalent managed services - Experience with compliance automation tooling and SOC2 evidence collection - Compliance automation and evidence tooling that supports SOC 2 controls in cloud environments - Experience with data quality and observability platforms - Knowledge of data anonymization and privacy-preserving infrastructure patterns - Exposure to AI agent frameworks or LLM-based tooling (e.g., AWS Bedrock/AgentCore, LangChain, or similar) is a big plus - Experience building or operating infrastructure for AI/ML workloads