Senior DevOps Engineer

DevOps EngineerScan.com's infrastructure is the layer everything else depends on. Our marketplace, integrations, data warehouse, and clinical workflows all sit on top of a cloud environment that has to be reliable, observable, secure, and compliant with the frameworks that govern healthcare technology. As we scale, that layer needs to scale with us, and the engineering practices around it need to mature at the same pace.We are seeking an experienced DevOps Engineer to join our Infrastructure team as we expand the DevOps function. This is a hands-on senior role that combines deep technical execution with the kind of engineering judgment that shapes how a growing infrastructure team operates. You will report into our Infrastructure leadership and work closely with Engineering, Security, and Compliance across a HIPAA-regulated environment.As a scale-up business, you can expect your role to develop over time. Here are some of the types of things you could be getting involved in:Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day oneEnsure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org worksImplement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionableAutomate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between "we run scans" and "we act on what they find"Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirationsArchitect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by defaultAdvance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adoptLeverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effortThe Top 5 Things We Want To See In Your First YearDeep Infrastructure Command. In your first 90 days, we would expect you to build a comprehensive understanding of our cloud environment: the services we run, how they are configured, where the risk concentrations are, and where the highest-leverage improvements sit. You are the person the team looks to for confident answers about how our infrastructure actually works.IaC Coverage And Reliability. By the end of your first year, our Terraform footprint has meaningfully expanded, drift has been reduced, and the infrastructure that matters most is managed in code without exceptions. New environments and services are provisioned reproducibly rather than by hand.A Stronger Security And Compliance Posture. You have materially contributed to how we implement HIPAA, SOC 2, and ISO controls in our cloud environment. Compliance is not a periodic scramble but a set of automated checks and repeatable patterns that hold up under audit and under real-world pressure.Deployment Maturity. Blue-green deployments, canary releases, and automated rollbacks are in production for the services where they matter most. The team's default expectation for a production change is that it can be made safely and reverted quickly.An AI-Native Infrastructure Team. You have raised the bar for how the Infrastructure function uses AI, both in your own work and in your coaching of the team. Configuration, scripting, troubleshooting, and risk analysis are all being accelerated by AI in ways that are measurable, safe, and repeatable.What You Might Bring To The TableYou don't need to tick all the boxes to apply for this role. Whether it's your first role or your fifth, we believe everyone can add value, learn, and grow. However, these might be some of the ways you are currently adding value:Six or more years of experience in DevOps, Infrastructure, and Cloud Engineering, with a track record of operating at a senior technical level in production environmentsDeep understanding of HIPAA, SOC-2, and ISO compliance frameworks and their technical implementation. You have translated compliance requirements into infrastructure controlsExpertise in AWS, including EKS, RDS, Security Hub, Identity Center, and Control Tower. You are fluent in the AWS security and account management primitives, not just the compute and storage onesStrong working knowledge of Postgres or other relational databases, including operational responsibilities such as performance tuning, backups, and failoverStrong expertise in CI/CD pipelines, particularly GitHub Actions & ArgoCD, and a clear point of view on how to structure pipelines that are fast, safe, and observableSolid grasp of security best practices in CI/CD pipelines and cloud infrastructure, with the practical experience to know where the common failure modes areHands-on experience with containerization (Docker, Kubernetes) and Infrastructure as Code (Terraform), including building and managing declarative GitOps deployment patterns via ArgoCD to handle application lifecycle management at scaleGenuine AI fluency in your daily infrastructure practice. You use AI tools daily to accelerate IaC, scripting, and troubleshooting. Rather than relying on AI as an occasional aid, you understand how to structure configurations so AI agents can reliably consume them, and you actively evaluate the security and quality of AI-generated code. Candidates who treat AI as a novelty rather than a core part of how they work will not be competitive for this roleAdvanced knowledge of Cloudflare and its role in edge, security, and performance architecturesExcellent problem-solving skills and the ability to troubleshoot complex deployment issues under production pressure without losing composure or accuracyHow We Will Interview YouWe keep our interview process short and sweet, and we're a nimble team that can progress at pace. Here are the stages you can expect, but we might switch up the order depending on team availability:Introductory call with our Senior Talent Partner, approximately 30 minutes by phone.Video call with the hiring manager, approximately 45 minutes, a structured deep-dive into the role and technical domain.Assessment stage, which may be a take-home exercise, in-person session, or additional video calls. We're mindful of your time.Meet the founders and/or other team members.Offer!BenefitsWe go beyond the basics with our benefits package. Here's what you can expect from us:Competitive salary range, plus performance bonus and equity401kHealthcare, Vision, and DentalAll equipment needed to do your role effectivelyFlexible and remote/hybrid working optionsPersonal development budgets18 days PTO plus public holidays10 paid sick daysInclusive policies designed by our team, for our teamDiversity At Scan.comScan.com is committed to eliminating discrimination and encouraging diversity within our team.We strive to provide equality and fairness for all job applicants and employees, and never discriminate on the basis of gender, marital status, age, race, ethnicity, religion, or physical differences.We are opposed to all forms of unlawful treatment and discrimination.Our ambition is for our team and its Board to be representative of the diversity in society, and for every employee to feel respected and able to bring their best selves to work.