If you have built pipelines that engineering teams actually depend on, you have been paged at 2am and made sure it did not happen again, and you care about getting security right, not as a box to check but as a prerequisite for shipping confidently, this role was built for you.
As our DevOps / Platform Lead, you will own the full deployment infrastructure for PRVNT: CI/CD pipelines, security gates, environment parity, secrets management, and the AI native toolchain that enables our engineering team to move fast without leaving compliance behind.
This is a greenfield build, not a maintenance seat.
You will work directly with the VP of Engineering to design and operate the pipeline foundation the entire organization runs on.
You will design the pipeline accordingly, with merge blocking security gates, HIPAA compliant infrastructure controls, and audit ready evidence trails that make HiTrust R2 and SOC 2 reviews non-events.
Architect and maintain the infrastructure that supports AI-assisted development.
Requirements
5+ years in DevOps or platform engineering, with at least 2 years in a healthcare or regulated industry environment;
Direct, hands on HIPAA compliant deployment experience, not just theory.
Hands on AWS at production depth: EKS or ECS with working command of ECR, IAM, VPC, KMS, Secrets Manager, CloudWatch, and GuardDuty;
IaC at production scale: Terraform required; all environment configuration is code, reviewed, and version controlled.
GitOps practice: ArgoCD or equivalent; declarative deployment, sync policies, and gating promotions across environments safely.
Demonstrated GitHub Actions experience at scale;
Observability stack ownership: Prometheus, Grafana, Loki, Tempo, OpenTelemetry, or Datadog;
Container fundamentals: image lifecycle management, ECR, SBOM generation, and container scanning integrated into the pipeline as a gate.
Scripting fluency in Python and Bash;
Network fundamentals including VPC design, DNS, NACLs, and routing.
Demonstrated experience integrating SAST and SCA tooling (Snyk, SentinelOne, or equivalents) into CI/CD with merge blocking enforcement.
Working knowledge of HiTrust R2 or SOC 2 controls, including audit evidence requirements and how infrastructure decisions create or close compliance gaps.
Daily, demonstrated use of Claude Code, GitHub Copilot, or equivalent AI assisted development tools.
Strong track record of platform reliability ownership; on call accountability for production systems.
Tech Stack
AWS
DNS
Grafana
Prometheus
Python
Terraform
Benefits
PTO
Medical, Dental, Vision, and supplemental insurance options