Senior DevOps Engineer

Job description

We’re Scan.com http://Scan.com, the digital health scale-up making diagnostics accessible, fast, and transparent. Our technology speeds up diagnoses for timely treatments, improving healthcare outcomes for hundreds of patients each day. We're doing diagnostics differently, with solutions tailored to both patients and providers, all backed by our technology and world-class customer operations team. Our B2C marketplace simplifies booking a scan, making it as straightforward for patients as booking a hotel. Our B2B platforms provide live scheduling at the point of care and harness AI to ease workflows for physicians, attorneys, and providers. WHAT YOU WILL BE GETTING INVOLVED IN Scan.com http://Scan.com's infrastructure is the layer everything else depends on. Our marketplace, integrations, data warehouse, and clinical workflows all sit on top of a cloud environment that has to be reliable, observable, secure, and compliant with the frameworks that govern healthcare technology. As we scale, that layer needs to scale with us, and the engineering practices around it need to mature at the same pace. We are seeking an experienced DevOps Engineer to join our Infrastructure team as we expand the DevOps function. This is a hands-on senior role that combines deep technical execution with the kind of engineering judgment that shapes how a growing infrastructure team operates. You will report into our Infrastructure leadership and work closely with Engineering, Security, and Compliance across a HIPAA-regulated environment. As a scale-up business, you can expect your role to develop over time. Here are some of the types of things you could be getting involved in: - Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day one - Ensure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org works - Implement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionable - Automate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between "we run scans" and "we act on what they find" - Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirations - Architect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by default - Advance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adopt - Leverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effort THE TOP 5 THINGS WE WANT TO SEE IN YOUR FIRST YEAR - Deep infrastructure command. In your first 90 days, we would expect you to build a comprehensive understanding of our cloud environment: the services we run, how they are configured, where the risk concentrations are, and where the highest-leverage improvements sit. You are the person the team looks to for confident answers about how our infrastructure actually works. - IaC coverage and reliability. By the end of your first year, our Terraform footprint has meaningfully expanded, drift has been reduced, and the infrastructure that matters most is managed in code without exceptions. New environments and services are provisioned reproducibly rather than by hand. - A stronger security and compliance posture. You have materially contributed to how we implement HIPAA, SOC 2, and ISO controls in our cloud environment. Compliance is not a periodic scramble but a set of automated checks and repeatable patterns that hold up under audit and under real-world pressure. - Deployment maturity. Blue-green deployments, canary releases, and automated rollbacks are in production for the services where they matter most. The team's default expectation for a production change is that it can be made safely and reverted quickly. - An AI-native infrastructure team. You have raised the bar for how the Infrastructure function uses AI, both in your own work and in your coaching of the team. Configuration, scripting, troubleshooting, and risk analysis are all being accelerated by AI in ways that are measurable, safe, and repeatable. WHAT YOU MIGHT BRING TO THE TABLE You don't need to tick all the boxes to apply for this role. Whether it's your first role or your fifth, we believe everyone can add value, learn, and grow. However, these might be some of the ways you are currently adding value: - Six or more years of experience in DevOps, Infrastructure, and Cloud Engineering, with a track record of operating at a senior technical level in production environments - Deep understanding of HIPAA, SOC-2, and ISO compliance frameworks and their technical implementation. You have translated compliance requirements into infrastructure controls - Expertise in AWS, including EKS, RDS, Security Hub, Identity Center, and Control Tower. You are fluent in the AWS security and account management primitives, not just the compute and storage ones - Strong working knowledge of Postgres or other relational databases, including operational responsibilities such as performance tuning, backups, and failover - Strong expertise in CI/CD pipelines, particularly GitHub Actions & ArgoCD, and a clear point of view on how to structure pipelines that are fast, safe, and observable - Solid grasp of security best practices in CI/CD pipelines and cloud infrastructure, with the practical experience to know where the common failure modes are - Hands-on experience with containerization (Docker, Kubernetes) and Infrastructure as Code (Terraform), including building and managing declarative GitOps deployment patterns via ArgoCD to handle application lifecycle management at scale - Genuine AI fluency in your daily infrastructure practice. You use AI tools daily to accelerate IaC, scripting, and troubleshooting. Rather than relying on AI as an occasional aid, you understand how to structure configurations so AI agents can reliably consume them, and you actively evaluate the security and quality of AI-generated code. Candidates who treat AI as a novelty rather than a core part of how they work will not be competitive for this role - Advanced knowledge of Cloudflare and its role in edge, security, and performance architectures - Excellent problem-solving skills and the ability to troubleshoot complex deployment issues under production pressure without losing composure or accuracy HOW WE WILL INTERVIEW YOU We keep our interview process short and sweet, and we're a nimble team that can progress at pace. Here are the stages you can expect, but we might switch up the order depending on team availability: - Introductory call with our Senior Talent Partner, approximately 30 minutes by phone. - Video call with the hiring manager, approximately 45 minutes, a structured deep-dive into the role and technical domain. - Assessment stage, which may be a take-home exercise, in-person session, or additional video calls. We're mindful of your time. - Meet the founders and/or other team members. - Offer! BENEFITS We go beyond the basics with our benefits package. Here's what you can expect from us: - Competitive salary range, plus performance bonus and equity - 401k - Healthcare, Vision, and Dental - All equipment needed to do your role effectively - Flexible and remote/hybrid working options - Personal development budgets - 18 days PTO plus public holidays - 10 paid sick days - Inclusive policies designed by our team, for our team Diversity at SCAN.COM http://Scan.com Scan.com http://Scan.com is committed to eliminating discrimination and encouraging diversity within our team. We strive to provide equality and fairness for all job applicants and employees, and never discriminate on the basis of gender, marital status, age, race, ethnicity, religion, or physical differences. We are opposed to all forms of unlawful treatment and discrimination. Our ambition is for our team and its Board to be representative of the diversity in society, and for every employee to feel respected and able to bring their best selves to work.