DevOps Engineer (Contract)

Your Opportunity

We’re looking for a DevOps Engineer who builds, solves problems, and multiplies the impact of everyone around them. You’ll own infrastructure-as-code with Terraform, apply site reliability practices that keep our platforms stable and observable, and build the resilient systems our data and application teams rely on. You’ll do your best work on our small, growing team, where people ship quickly and support one another. This is a chance to help shape a leading healthcare technology company.

Infrastructure & Cloud Engineering

Design, provision, and operate AWS infrastructure with infrastructure as code (Terraform), including reusable modules and environment-specific configurations

Configure and harden core AWS networking and security constructs, including VPCs, subnets, routing, NACLs, security groups, IAM roles and policies, KMS keys, and parameter and secret management

Implement and operate containerized services with Docker and AWS ECS/Fargate, including image pipelines, task definitions, service autoscaling, and blue-green or rolling deployments

Build and maintain serverless services with AWS Lambda and API Gateway, including event-driven integrations with EventBridge and S3

Manage and operate Databricks infrastructure on AWS, including cluster configuration, workspace management, PrivateLink networking, and identity federation

Design and implement isolated development sandbox environments for secure data job execution

Reliability, Monitoring & Incident Response

Implement comprehensive monitoring, logging, and alerting in CloudWatch (metrics, logs, dashboards, alarms) and integrate alerts with incident channels

Participate in production support including on-call responsibilities as needed, and drive post-incident reviews and reliability improvements

Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to policy

CI/CD & Deployment

Build, maintain, and optimize CI/CD pipelines in GitHub Actions for infrastructure (Terraform workflows),applications (container, serverless, and data jobs) and agent deployments

Adhere to the Change Management policy, including documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment

Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices

Documentation & Operational Standards

Document architecture, runbooks, and standard operating procedures for build, release, disaster recovery, and incident response

Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices

AI & Governance

Support AI/ML platform enablement with AgentCore infrastructure, governance controls, and access patterns

Implement infrastructure for AI-powered operational tools (e.g., self-healing systems, security vulnerability remediation agents)

Security & Compliance

Coordinate with the Information Security team to securely configure and maintain applications with secure authentication mechanisms, role-based access, and support for access reviews in accordance with the Identity Management Authentication and Access Control and Data and Platform Security policies

Adhere to the Change Management policy, which includes documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment; submit a change request, ensure an information security impact assessment is completed, coordinate pre-implementation activities, and ensure approvals are in place prior to implementation

Maintain accountability for secure software development practices, including secure coding standards, vulnerability scanning, and remediation prior to production deployment

Apply hardening standard configurations in conjunction with Information Security and ensure vulnerabilities are remediated in accordance with the Vulnerability Management policy

Ensure firewall configurations align with Data and Platform policy, including documentation with justifications for all rule changes, removal of obsolete rules, and participation in Information Security firewall rule reviews

Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to Vytalize policies

Maintain accurate and up-to-date inventories of hardware, software, and cloud assets throughout their lifecycle from acquisition to decommissioning, ensuring assets are classified, assigned to owners, tracked in approved systems, and aligned with Information Security policies

PREFERRED QUALIFICATIONS

On-call experience and comfort with incident response, including runbook creation and post-incident analysis

Experience with policy-as-code and guardrails (e.g., SCPs, IAM boundaries, OPA/Conftest)

Familiarity with secrets management and parameterization (AWS Secrets Manager, SSM Parameter Store)

Experience with AWS EKS / Kubernetes deployment and operations

Exposure to cost optimization, tag policies, and FinOps practices

Federated identity and access management: OIDC, SAML, Entra ID, Cognito, and workload identity federation for CI/CD

Databricks experience (clusters, jobs, permissions, metastores) and integration with cloud networking and identity

Streaming and data pipeline experience with Kinesis, EventBridge Scheduler, or equivalent managed services

Experience with compliance automation tooling and SOC2 evidence collection

Compliance automation and evidence tooling that supports SOC 2 controls in cloud environments

Experience with data quality and observability platforms

Knowledge of data anonymization and privacy-preserving infrastructure patterns

Exposure to AI agent frameworks or LLM-based tooling (e.g., AWS Bedrock/AgentCore, LangChain, or similar) is a big plus

Experience building or operating infrastructure for AI/ML workloads