DevOps Engineer

This is a fully remote position, open to applicants in Wisconsin.

📋 Description

• Take ownership of the reliability, performance, and security of the AWS production environment.

• Design, develop, and maintain CI/CD pipelines for PHP/Symfony and React applications, incorporating automated security gates.

• Transition infrastructure provisioning and configuration to a codified, repeatable infrastructure-as-code framework.

• Construct and optimize centralized logging, monitoring, and alerting systems utilizing CloudWatch and Datadog.

• Manage Docker container workloads on ECS, including FreeSWITCH fax/telephony containers.

• Operate independently scaled microservices infrastructure, encompassing auto-scaling, load balancing, and resource optimization.

• Collaborate with engineering teams on service scaling, deployment, and performance enhancements.

• Provide support for Aurora MySQL and MongoDB reliability and performance initiatives.

• Strengthen PHI-handling systems and facilitate remediation from penetration tests.

• Manage secrets, keys, and access controls across various environments.

• Enhance deployment safety, rollback procedures, and ensure parity among Dev/UAT/Prod environments.

• Codify infrastructure, advance observability, and bolster compliance within the initial 6–12 months.

⛳️ Requirements

• Practical production experience with AWS services including EC2, ALB/ELB, Aurora/RDS MySQL, S3, ECS, CloudWatch, IAM, VPC, and security groups.

• Proficiency in Linux server administration, particularly with Ubuntu 24.04 LTS.

• Experience with Docker in a production environment, including building, running, and troubleshooting containerized services.

• Expertise in designing and maintaining CI/CD pipelines using Bitbucket Pipelines.

• Proficient in Bash scripting for automation, system administration, and pipeline support.

• Experience with CloudWatch and Datadog for logging, observability, dashboards, and alerting.

• Knowledge of Apache and PHP-FPM configuration, tuning, and troubleshooting.

• MySQL administration skills, including backup/restore and performance troubleshooting; familiarity with MongoDB is a plus.

• Competence in secrets and access management, covering SSH keys, API tokens, and environment-scoped secrets.

• Strong grasp of distributed systems and the principles of stateless microservice scaling.

• SFTP administration skills and secure file transfer practices, including chroot/jailing, authentication, automation, and monitoring.

• Understanding of HIPAA infrastructure requirements for PHI, including encryption, audit logging, least privilege, and network isolation.

• Experience with automated security scanning and CI/CD security gates, including SAST/DAST, SCA, container, IaC, and secrets scanning.

• Familiarity with web application vulnerabilities and corresponding infrastructure mitigations.

• Experience in supporting audits, penetration-test remediation, or compliance activities.

• Preferred experience with Terraform and/or Ansible.

• A Bachelor's degree in a technical discipline or a related field, or an equivalent combination of education, training, or work experience is preferred/required as an alternative.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and flexible work arrangements.

• Opportunities for professional development and continuous learning.

• Collaborative and inclusive work environment.