Senior DevOps Engineer

We're Scan.com . We're building America's national imaging network: the infrastructure that connects patients, providers, and payers to faster, better-value diagnostic imaging. Thousands of patients move through our platform every day, and each is a real person waiting for an answer to a healthcare concern. We exist to get them that answer faster.

We manage the medical imaging pathway end-to-end. Providers order through a single point of entry, and from there, we run the entire medical diagnostic pathway. Managing the full pathway, rather than brokering pieces of it, is what lets us deliver imaging faster, at higher quality, and at a lower cost than the fragmented status quo.

We're looking for a Senior DevOps Engineer at an exciting time. We've raised over $200m in funding to date, reached profitability, and are growing 100% year on year.

Millions of people wait too long for a diagnosis. Come help us fix that.

WHAT YOU WILL BE GETTING INVOLVED IN

Scan.com 's infrastructure is the layer on which everything else depends. Our marketplace, integrations, data warehouse, and clinical workflows all run on a cloud environment that must be reliable, observable, secure, and compliant with the frameworks governing healthcare technology. As we scale, that layer needs to scale with us, and the engineering practices around it need to mature at the same pace.

We are seeking a Senior DevOps Engineer to join our Infrastructure team as we expand the DevOps function. This is a hands-on senior role that combines deep technical execution with the kind of engineering judgment that shapes how a growing infrastructure team operates. You will report into our Infrastructure leadership and work closely with Engineering, Security, and Compliance across a HIPAA-regulated environment.

As a scale-up business, you can expect your role to develop over time. Here are some of the types of things you could be getting involved in:

Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day one

Ensure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org works

Implement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionable

Automate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between "we run scans" and "we act on what they find"

Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirations

Architect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by default

Advance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adopt

Leverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effort

THE TOP 5 THINGS WE WANT YOU TO ACHIEVE IN YOUR FIRST YEAR ARE

Deep infrastructure command. In your first 90 days, we would expect you to build a comprehensive understanding of our cloud environment: the services we run, how they are configured, where the risk concentrations are, and where the highest-leverage improvements sit. You are the person the team looks to for confident answers about how our infrastructure actually works.

IaC coverage and reliability. By the end of your first year, our Terraform footprint has meaningfully expanded, drift has been reduced, and the infrastructure that matters most is managed in code without exceptions. New environments and services are provisioned reproducibly rather than by hand.

A stronger security and compliance posture. You have materially contributed to how we implement HIPAA, SOC 2, and ISO controls in our cloud environment. Compliance is not a periodic scramble but a set of automated checks and repeatable patterns that hold up under audit and under real-world pressure.

Deployment maturity. Blue-green deployments, canary releases, and automated rollbacks are in production for the services where they matter most. The team's default expectation for a production change is that it can be made safely and reverted quickly.

An AI-native infrastructure team. You have raised the bar for how the Infrastructure function uses AI, both in your own work and in your coaching of the team. Configuration, scripting, troubleshooting, and risk analysis are all being accelerated by AI in ways that are measurable, safe, and repeatable.

WHAT YOU MIGHT BRING TO THE TABLE

You don't need to tick all the boxes to apply for this role. Whether it's your first role or your fifth, we believe everyone can add value, learn, and grow. However, these might be some of the ways you are currently adding value:

Six or more years of experience in DevOps, Infrastructure, and Cloud Engineering, with a track record of operating at a senior technical level in production environments

Deep understanding of HIPAA, SOC-2, and ISO compliance frameworks and their technical implementation. You have translated compliance requirements into infrastructure controls

Expertise in AWS, including EKS, RDS, Security Hub, Identity Center, and Control Tower. You are fluent in the AWS security and account management primitives, not just the compute and storage ones

Strong working knowledge of Postgres or other relational databases, including operational responsibilities such as performance tuning, backups, and failover

Strong expertise in CI/CD pipelines, particularly GitHub Actions & ArgoCD, and a clear point of view on how to structure pipelines that are fast, safe, and observable

Solid grasp of security best practices in CI/CD pipelines and cloud infrastructure, with the practical experience to know where the common failure modes are

Hands-on experience with containerization (Docker, Kubernetes) and Infrastructure as Code (Terraform), including building and managing declarative GitOps deployment patterns via ArgoCD to handle application lifecycle management at scale

Genuine AI fluency in your daily infrastructure practice. You use AI tools daily to accelerate IaC, scripting, and troubleshooting. Rather than relying on AI as an occasional aid, you understand how to structure configurations so AI agents can reliably consume them, and you actively evaluate the security and quality of AI-generated code. Candidates who treat AI as a novelty rather than a core part of how they work will not be competitive for this role

Advanced knowledge of Cloudflare and its role in edge, security, and performance architectures

Excellent problem-solving skills and the ability to troubleshoot complex deployment issues under production pressure without losing composure or accuracy

AI REQUIREMENTS

At Scan.com , AI isn't a side project; it's how we work. We expect everyone to use AI to think faster, remove drudgery, and multiply their output. What we care about is judgment: knowing when AI makes you sharper, when it doesn't, and how to use it responsibly around patient data. We'll assess this in the way that matters for this role, using the tier below. You don't need to be an engineer. You need to be someone who reaches for the best tool and gets more done as a result.

Tier 1 — For this role, the expectation is that you are an AI-Native. You build with AI directly, shipping, automating, or prototyping real work with LLMs and agents, and have clear judgment on where humans must stay in the loop. (this is typically aligned to engineering, data, product, ops automation, RevOps)

You build with AI, not just