DevOps Engineer

Nsight Health is seeking a DevOps Engineer to operate and improve its AWS platform, infrastructure-as-code, security, and delivery systems. The role focuses on reliability, compliance, developer self-service, and progressively automating infrastructure and delivery workflows for safe AI-agent operation.

Responsibilities:

• Own alert triage, incident response, root-cause analysis, and blameless postmortems. Be the person who knows why the platform did what it did. Write the runbooks that are missing, close the gaps you find, and leave every incident better documented than you found it. Maintain backup and replication health and own the operational surface across all AWS accounts
• Triage and remediate security findings as they surface. Treat an out-of-date package as a defect with an owner, not a cleanup project. Keep dependencies, base images, and runtimes current on a defined schedule rather than reactively after an incident. Own IAM roles and permission boundaries, break-glass procedures, and credential models for both human and AI-agent workloads
• Own Terraform modules, state, and conventions for platform infrastructure. Bring any resources still managed by hand under code. Define the module conventions, review process, and automated checks the infrastructure runs on. Ensure every change flows through controls that keep the organization within HITRUST r2 and SOC 2 obligations, with evidence generated automatically rather than assembled at audit time
• Own GitHub Actions workflows for build, test, and deployment across environments. Define environment promotion strategy and maintain the delivery metrics that show whether shipping is getting faster and safer. Remove friction from the pipeline: slow builds, manual steps, unclear environment parity, and undocumented conventions are problems with owners
• Own the time between “I need X” and “I have X” for the engineering team. Build self-service paths for environment provisioning, access workflows, and internal tooling so engineers get what they need without filing a ticket. Ship measurable developer-experience improvements and track the time they save
• Build the access model, ephemeral environments, and pipeline gates that let AI coding agents work on infrastructure and application code safely over extended sessions. Provide design input on how agents will provision, change, and validate infrastructure. Progressively automate the work you do manually until the pipeline runs with you supervising it rather than operating it

Requirements:

• Hands-on software engineering background — likely backend, platform, or developer-experience work — with demonstrated ability to read, write, and debug production code and operate something you built
• Working familiarity with at least one major cloud provider and a strong appetite to go deep on AWS; understands the difference between a service and a primitive and learns new ones by using them
• Some hands-on exposure to infrastructure as code, ideally Terraform; has written or modified modules, run a plan and apply, and wants to do significantly more of it
• Comfortable writing, debugging, and deploying with GitHub Actions, including workflows, reusable actions, secrets handling, and environment protections
• Security-conscious by default: keeps packages, images, and runtimes current; reads vulnerability reports and acts on them; thinks about blast radius and least privilege before convenience
• Strong scripting and automation instincts: when you do something twice by hand, you write the tool
• Systems thinking: able to trace a request through a load balancer, container, queue, and database and reason about where it broke
• Experience operating under a compliance framework such as SOC 2, ISO 27001, or similar
• Steady under pressure with the ability to manage multiple concurrent workstreams without dropping threads
• Clear, direct communicator: able to write a runbook an on-call engineer can follow at 3 a.m. and a postmortem that fixes the system rather than blames a person
• Active daily use of Claude Code, GitHub Copilot, or equivalent AI-assisted development tools. This is a hard requirement
• prior work with PHI, HIPAA, or HITRUST is a meaningful plus
• Depth in multi-account AWS governance including organizational structure, guardrails, and centralized logging and key management
• Prior experience building or operating a platform for AI coding agents, including scoped cloud access, ephemeral environments, or policy-as-code pipeline gates
• Experience working alongside senior technical leaders and delivering within technical standards set by others
• Exposure to healthcare data environments, HIPAA-regulated data flows, or HITRUST r2 certification processes
• Bachelor's degree in Computer Science, Engineering, or a related field. Relevant experience will be weighted heavily over educational credentials alone