1upHealth - Staff DevOps Engineer (Platform)
Requirements
• 8+ years in DevOps, platform, SRE or infrastructure engineering, with production AWS experience. • Track record of driving cross-team initiatives: building alignment with engineering, product and business stakeholders, and influencing without direct authority. • Built and maintained CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins or similar) that include automated testing stages. • Experience writing automated tests, not just running them: at least one test framework such as pytest, Go's testing package, Jest, or Terratest. • Proficiency in at least one general-purpose language (Python or Go preferred) plus common scripting languages ie. Bash/SH. • Strong Terraform skills; Terragrunt or another multi-environment pattern is a plus. • Hands-on Kubernetes experience, including Helm and a GitOps tool such as ArgoCD. • Working knowledge of observability tools (Datadog, Prometheus/Grafana or similar) and how to alert on what matters. • Comfort with on-call, incident response, converting incidents into automated prevention. • Clear written communication: design docs, runbooks and postmortems others can act on. • Experience in healthcare or another regulated industry (HIPAA, SOC 2, HITRUST). • Background in SDET or QA automation role. • Familiarity with FHIR R4 or other healthcare data standards. • Policy-as-code and compliance automation (OPA/Gatekeeper, AWS Config rules). • Contract testing (Pact) or API testing tools. • Load and chaos testing tools such as k6, Locust, Gatling, AWS Fault Injection Service or LitmusChaos. • Experience testing data pipelines or streaming systems (Kafka or compatible platforms). • Don't meet every requirement? Studies have shown that women, communities of color and historically underrepresented talent are less likely to apply to jobs unless they meet every single qualification. At 1upHealth we are dedicated to building a diverse, inclusive and authentic workplace. We encourage folks to apply if they meet at least 50% of the qualifications above.
Responsibilities
• Work across a multi-account AWS environment running Kubernetes, with infrastructure managed through Terraform and Terragrunt and deployments handled through GitOps. • Work cross-functionally across all engineering teams to understand their delivery and testing needs to turn shared pain points into platform improvements. • Partner with developers to build and maintain shared test frameworks and fixtures, including synthetic test data that contains no real PHI. • Collaborate with Product and Engineering leadership to plan, prioritize and deliver initiatives across the Product & Engineering organization. • Build automated quality gates into CI/CD: integration, contract and end-to-end tests run on every change, with clear pass/fail signals. • Automate operational toil with scripts, runbooks and internal tools. • Test infrastructure as code with tools such as Terratest, terraform validate/plan checks, policy-as-code (OPA, Checkov, tfsec) and Helm chart tests. • Create ephemeral test environments so engineers can validate changes against production-like infrastructure before merging. • Design, build and maintain AWS infrastructure across many accounts (EKS, EC2, VPC, IAM, S3, Route 53, Transit Gateway) using Terraform and Terragrunt. • Add post-deploy validation: smoke tests, synthetic monitors and automated rollback when health checks fail. • Create and grow new and existing integration and end-to-end test suites to eliminate gaps in coverage. • Run performance, load and resilience testing (including failure injection) on critical services and data pipelines. • Track test reliability and pipeline speed; find and fix flaky tests and slow stages. • Run and improve our Kubernetes platform, including Helm charts, ArgoCD-based GitOps delivery, autoscaling and cluster upgrades. • Build and maintain CI/CD pipelines that take code from commit to production with minimal manual steps. • Own observability: metrics, logs, traces, dashboards and alerting in Datadog, with SLOs for the services you support. • Take part in an on-call rotation, lead incident response, and write blameless postmortems that lead to long term fixes. • Keep the platform secure and HIPAA-compliant: least-privilege IAM, encryption, audit logging, and remediating findings from cloud security tooling.
Benefits
• 100% Paid BCBS Medical and Dental Insurance for Employees • Vision Insurance • Equity for All Employees • Lifestyle Spending Account • Parental Leave (6 weeks bonding leave for all new parents + 10 weeks for birthing parents) • Security Alert: 1upHealth only uses email domains of First Name. Last [email protected] or [email protected] to communicate with prospects. You will never receive an email from a third-party email service such as gmail. In addition, we will never ask a candidate for employment to share personal information (such as banking information, social security numbers, passport, etc), purchase their own equipment, or pay to apply to an open position. • Security Alert:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT