Lead DevOps / Site Reliability Engineer

Soliish is hiring a Lead DevOps / Site Reliability Engineer to own the reliability, scalability, and security of production infrastructure across its products and platforms. The role leads SRE practices, incident response, automation, observability, compliance, and a distributed DevOps team supporting high-availability, multi-region AWS environments.

Responsibilities:

• Own production availability targets (99.99%+), including SLOs, SLIs, and error budgets for customer-facing services
• Design and operate multi-region active/active architecture, disaster recovery, and automated failover with defined RTO/RPO
• Lead incident response as incident commander, run blameless postmortems, and drive corrective actions to completion
• Build and improve on-call rotations, escalation paths, and runbooks across distributed teams and time zones
• Lead resilience testing, including chaos and failure injection
• Build and maintain all infrastructure in Terraform with peer-reviewed, modular, IaC-first practices
• Manage and scale Amazon EKS clusters across regions for performance, cost, and availability
• Operate Aurora PostgreSQL, including Global Databases, plus Redis and OpenSearch at scale
• Own CI/CD and GitOps pipelines that enable safe, zero-downtime deployments and fast rollback
• Own the performance and scalability of high-volume, high-traffic production systems
• Profile and uncover bottlenecks across compute, databases, caching, search, and networking, and drive fixes to completion
• Anticipate scaling limits through capacity modeling and growth forecasting, and address them proactively before they affect customers
• Run and test zero-downtime deployments, database migrations, and infrastructure changes, validating them through load and failover testing
• Design end-to-end observability (metrics, logs, traces) using Prometheus, Grafana, CloudWatch, and related tools
• Build actionable alerting tied to SLOs to reduce noise and catch customer impact early
• Provide reliability reporting to the CTO and engineering leadership
• Drive infrastructure hardening, least-privilege access, secrets management, and encryption in transit and at rest
• Design and operate controls for environments that handle Protected Health Information (PHI) under HIPAA, including access logging, data segregation, and breach-response readiness
• Maintain PCI DSS–compliant infrastructure, including cardholder data environment (CDE) scoping, network segmentation, and quarterly scanning and remediation
• Support SOC 2 Type 2 attestations end to end: run controls over the full observation period, automate evidence collection, and work directly with auditors
• Own endpoint protection, auditing, and security monitoring across cloud workloads and devices
• Take part in threat modeling, vulnerability management, and security incident response
• Provide technical leadership to our offshore DevOps engineers, and improve the team’s practices, tooling, and operational maturity
• Establish follow-the-sun coverage, handoffs, and escalation paths that deliver consistent 24x7 operations
• Set operational standards, document architecture and procedures, and mentor engineers across time zones
• Partner with engineering on developer environments, service mesh, and deployment workflows

Requirements:

• 6+ years in DevOps, SRE, or cloud infrastructure, including ownership of high-availability production systems
• Proven experience running services at 99.99% or higher
• Proven experience owning and scaling high-volume, high-traffic production environments, including uncovering and resolving performance bottlenecks, running and validating zero-downtime deployments and migrations, and anticipating scaling issues before they affect customers
• Experience in regulated industries such as healthcare, fintech, banking, or payments, including supporting customer and partner security reviews, regulatory exams, and vendor risk assessments
• Hands-on experience supporting SOC 2 Type 2 attestations, PCI DSS compliance, and HIPAA/PHI safeguards in production
• Familiarity with US security and privacy requirements (for example, HIPAA and GLBA), including data residency and cross-border data considerations
• Deep AWS expertise, especially EKS, Aurora PostgreSQL / Global Databases, IAM, KMS, and multi-region networking
• Advanced Terraform and Kubernetes skills; experience scaling Redis and OpenSearch
• Hands-on incident command, postmortem, and on-call leadership experience
• Experience leading, mentoring, or working closely with offshore or distributed DevOps teams across time zones, and improving their processes and quality
• Experience supporting multiple products or platforms while keeping compliance scope and access properly separated
• Meticulous attention to detail in change management, documentation, and audit readiness
• Ability to work independently in a remote, high-trust startup environment
• Clear written communication; comfortable working async
• Candidates in the US must be currently authorized to work in the US without employer sponsorship
• For candidates in the Greater Toronto Area, we may support Canadian work permit sponsorship where needed
• Experience with healthcare data and interoperability (e.g., HL7, FHIR) or real-time transactions payments and verification systems
• Service mesh experience and GitOps tooling (e.g., Argo CD)
• Experience building an SRE function or practice at an early-stage company