Senior DevOps Engineer

Scan.com is a digital health scale-up focused on making diagnostics accessible and efficient. They are seeking a Senior DevOps Engineer to join their Infrastructure team, responsible for enhancing the reliability and security of their cloud environment while implementing best practices in DevOps and compliance.

Responsibilities:

• Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day one
• Ensure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org works
• Implement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionable
• Automate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between "we run scans" and "we act on what they find"
• Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirations
• Architect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by default
• Advance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adopt
• Leverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effort

Requirements:

• Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day one
• Ensure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org works
• Implement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionable
• Automate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between 'we run scans' and 'we act on what they find'
• Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirations
• Architect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by default
• Advance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adopt
• Leverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effort
• Deep infrastructure command. In your first 90 days, we would expect you to build a comprehensive understanding of our cloud environment: the services we run, how they are configured, where the risk concentrations are, and where the highest-leverage improvements sit. You are the person the team looks to for confident answers about how our infrastructure actually works
• IaC coverage and reliability. By the end of your first year, our Terraform footprint has meaningfully expanded, drift has been reduced, and the infrastructure that matters most is managed in code without exceptions. New environments and services are provisioned reproducibly rather than by hand
• A stronger security and compliance posture. You have materially contributed to how we implement HIPAA, SOC 2, and ISO controls in our cloud environment. Compliance is not a periodic scramble but a set of automated checks and repeatable patterns that hold up under audit and under real-world pressure
• Deployment maturity. Blue-green deployments, canary releases, and automated rollbacks are in production for the services where they matter most. The team's default expectation for a production change is that it can be made safely and reverted quickly
• An AI-native infrastructure team. You have raised the bar for how the Infrastructure function uses AI, both in your own work and in your coaching of the team. Configuration, scripting, troubleshooting, and risk analysis are all being accelerated by AI in ways that are measurable, safe, and repeatable
• Six or more years of experience in DevOps, Infrastructure, and Cloud Engineering, with a track record of operating at a senior technical level in production environments
• Deep understanding of HIPAA, SOC-2, and ISO compliance frameworks and their technical implementation. You have translated compliance requirements into infrastructure controls
• Expertise in AWS, including EKS, RDS, Security Hub, Identity Center, and Control Tower. You are fluent in the AWS security and account management primitives, not just the compute and storage ones
• Strong working knowledge of Postgres or other relational databases, including operational responsibilities such as performance tuning, backups, and failover
• Strong expertise in CI/CD pipelines, particularly GitHub Actions & ArgoCD, and a clear point of view on how to structure pipelines that are fast, safe, and observable
• Solid grasp of security best practices in CI/CD pipelines and cloud infrastructure, with the practical experience to know where the common failure modes are
• Hands-on experience with containerization (Docker, Kubernetes) and Infrastructure as Code (Terraform), including building and managing declarative GitOps deployment patterns via ArgoCD to handle application lifecycle management at scale
• Genuine AI fluency in your daily infrastructure practice. You use AI tools daily to accelerate IaC, scripting, and troubleshooting. Rather than relying on AI as an occasional aid, you understand how to structure configurations so AI agents can reliably consume them, and you actively evaluate the security and quality of AI-generated code. Candidates who treat AI as a novelty rather than a core part of how they work will not be competitive for this role
• Advanced knowledge of Cloudflare and its role in edge, security, and performance architectures
• Excellent problem-solving skills and the ability to troubleshoot complex deployment issues under production pressure without losing composure or accuracy