DevOps Engineer

Every day, over 10,000 eye care professionals log into Crystal's software before they see their first patient. We're the operating system behind independent eyecare — the EHR, practice management, billing, scheduling, and payments platform that keeps these practices running smoothly.

With new leadership, fresh growth capital from top-tier software and search fund investors, and a clear runway to $35mm+ in ARR, Crystal is at an inflection point. We're not a startup – we're a market leader focused on long-term value creation. That means building the team, the product, and the go-to-market engine to execute on our ambitious goals.

We're assembling a team that matches the opportunity. If that sounds like your kind of challenge, we'd like to hear from you.

About this Role

The DevOps Engineer will own and evolve Crystal's cloud infrastructure, the backbone that keeps over 10,000 eyecare professionals online and operational every day. This is a high-ownership, hands-on role sitting at the intersection of infrastructure reliability, developer productivity, and operational excellence. You'll work closely with the engineering team while independently driving the maturity of our AWS environment, CI/CD pipelines, containerization strategy, and observability platform.

This isn't a maintenance role. We have a decent foundation and need someone to scale it. You’ll bring engineering rigor, automation, and modern DevOps practices to a platform that's growing fast.

• Design, build, and maintain AWS infrastructure with a focus on reliability, security, and cost efficiency
• Own and modernize CI/CD pipelines to accelerate safe, frequent software delivery across all product lines
• Lead containerization efforts and drive Kubernetes or ECS adoption to improve deployment consistency and scalability
• Implement and maintain Infrastructure as Code (IaC) using Terraform across all environments
• Build comprehensive monitoring, alerting, and observability systems; own incident response for infrastructure events
• Establish cloud cost management practices — baseline spend, identify optimization opportunities, and implement savings
• Maintain a HIPAA-aware security posture including access controls, encryption standards, audit logging, and vulnerability management
• Manage virtual desktop infrastructure (AWS WorkSpaces, AppStream, or equivalent) for internal teams and contractors, including provisioning, imaging, and access control
• Support hybrid and multi-cloud infrastructure, including hands-on Azure work alongside our primary AWS environment
• Partner closely with software engineers to embed DevOps practices into the development lifecycle
• Document infrastructure architecture, runbooks, and operational procedures to support team resilience

Key Responsibilities

• A high-ownership individual who takes full accountability for infrastructure uptime, performance, and security
• A builder mentality: can assess the current state, design a better target state, and execute the transition without waiting to be directed
• Comfortable operating as the sole infrastructure owner while collaborating fluidly with a software engineering team
• Proven experience designing and managing AWS infrastructure at scale, with hands-on Terraform IaC proficiency
• 4+ years of DevOps or infrastructure engineering experience with direct ownership of production environments
• Track record of building or modernizing CI/CD pipelines that measurably improved deployment frequency, reliability, or developer experience
• Experience containerizing applications and managing workloads in Kubernetes or ECS
• Strong scripting ability in Bash and/or Python to automate operational workflows
• Experience implementing monitoring and observability platforms with on-call incident response processes to match

Qualifications

Required

• 4+ years of DevOps or infrastructure engineering experience with production AWS ownership
• Deep AWS expertise — EC2, RDS, ECS/EKS, S3, IAM, VPC, Route 53, CloudWatch, and related services
• Strong Terraform proficiency; ability to design, write, and maintain IaC from scratch
• CI/CD pipeline experience (GitHub Actions, CircleCI, Jenkins, or similar tools)
• Container and orchestration experience — Docker required; Kubernetes or ECS strongly preferred
• Scripting proficiency in Bash and/or Python for automation and tooling
• Experience with monitoring and observability tooling and ownership of incident response processes
• Strong operational mindset with comfort around runbooks, change management, and on-call ownership

Preferred

• Familiarity with HIPAA compliance requirements in healthcare SaaS environments
• Experience with cloud cost management tooling (AWS Cost Explorer, Infracost, or similar)
• Security tooling experience (AWS Security Hub, GuardDuty, Snyk, or equivalent)
• Background supporting a rapidly growing SaaS company through a platform scaling inflection point
• Comfortable coordinating directly with external managed service providers and migration/implementation partners