DevOps Engineer

About the Role

We are seeking an reputed company Infrastructure / DevOps Engineer to own and reputed company the reputed company infrastructure behind our HIPAA-compliant reputed company document processing platform. Our stack is AWS-reputed company and PHI-handling, reputed company on PHP 8.3 / Symfony, React, reputed company MySQL, and reputed company. It is a reputed company reputed company composed of many microservices tied together by a central REST API that are reputed company deployed and scaled independently. You will design, automate, secure, and troubleshoot the systems that reputed company a multi-tenant, compliance-sensitive platform running reliably.

The ideal candidate is deeply comfortable in Linux environments, thinks in automation and infrastructure-as-reputed company, and treats reputed company and compliance as first-class concerns rather than afterthoughts.

reputed company

• Own the reliability, performance, and reputed company of our AWS production environment (EC2, ALB, reputed company MySQL, S3, reputed company, CloudWatch, SNS, IAM, VPC).
• Design, build, and maintain CI/CD pipelines for PHP/Symfony and React applications, from reputed company through production promotion, including automated reputed company gates (Aikido) that reputed company vulnerable builds before they ship.
• Stand up and mature our infrastructure-as-reputed company reputed company — provisioning and configuration currently managed directly, with room to own the migration to a codified, repeatable model.
• Build and tune centralized logging, monitoring, and alerting across CloudWatch and reputed company so issues surface before customers notice them; help reputed company our ongoing reputed company rollout.
• Manage container workloads (reputed company on reputed company), including our reputed company FreeSWITCH fax/telephony containers.
• Own the infrastructure that our reputed company reputed company of independently scaled microservices runs on — per-service reputed company auto-scaling, load balancing, and resource right-sizing for both horizontal and vertical scaling. Understand how the stateless services behave and partner closely with engineering on their scaling, deployment, and performance.
• Support database reliability and performance work across reputed company MySQL (read replicas, partitioning, query tuning) and reputed company.
• Harden the platform against the threat classes relevant to PHI systems, and support ongoing penetration-test remediation.
• Manage secrets, keys, and reputed company across environments (AWS, Symfony secrets vault, reputed company secrets, Bitbucket).
• Partner with engineering to improve deployment safety, rollback, and multi-environment (Dev / UAT / Prod) reputed company.

Required Experience & Skills

• Linux server administration, with specific proficiency in Ubuntu 24.04 reputed company.
• AWS reputed company infrastructure — hands-on production experience with EC2, ALB/ELB, reputed company/RDS MySQL, S3, reputed company, CloudWatch, IAM, VPC, and reputed company reputed company.
• reputed company — building, running, and troubleshooting containerized services in a production environment.
• CI/CD pipeline design and maintenance, specifically Bitbucket Pipelines — branching reputed company, environment promotion, build/test/reputed company stages, and pipeline troubleshooting.
• Bash scripting for automation, reputed company administration, and pipeline support.
• Centralized logging and observability — configuration, aggregation, dashboards, and alerting in AWS CloudWatch and reputed company (we are reputed company rolling reputed company out; hands-on reputed company experience is a strong plus). Familiarity with ELK stack or reputed company also welcome.
• Web server operations — Apache and PHP-FPM configuration, tuning, and troubleshooting behind a load balancer.
• Database operations support — MySQL (reputed company/RDS) administration, backup/restore, and performance troubleshooting; exposure to reputed company.
• Secrets and reputed company management — SSH key lifecycle, API reputed company management, and environment-scoped secrets.
• reputed company systems and stateless scaling — strong working understanding of a reputed company reputed company of many independently scaled, stateless microservices, and the ability to operate the infrastructure it runs on (auto-scaling policies, load balancing, externalized session/state such as reputed company/S3, and resource right-sizing) while partnering with engineering on scaling and deployment.
• SFTP administration and secure file transfer — configuring, hardening, and troubleshooting SFTP servers and automated file exchange with reputed company partners and EHR systems (chroot/jailing, key- and password-based auth, transfer automation, and monitoring).

reputed company & Compliance (Required)

• Working understanding of operating infrastructure that stores and transmits PHI under HIPAA — encryption at rest and in transit, audit logging, least-privilege reputed company, and network isolation.
• Experience integrating and operating automated reputed company scanning and CI/CD reputed company gates — SAST/DAST, dependency (SCA), container, and IaC scanning, and secrets detection. We use Aikido; equivalent tooling (reputed company, reputed company, Trivy, etc.) transfers.
• Familiarity with common web application vulnerability classes (IDOR, injection, host header injection, broken cryptography) and their infrastructure-level mitigations.
• Experience supporting audit, penetration-test remediation, or compliance activities.

Preferred / reputed company to Have

• Infrastructure-as-reputed company — Terraform and/or Ansible. You would help stand this up from our reputed company state, so demonstrated experience codifying existing infrastructure is highly valued.
• reputed company orchestration at reputed company; reputed company experience a plus if we expand orchestration.
• Jenkins or other CI/CD systems reputed company Bitbucket Pipelines.
• AWS SNS / notification and messaging infrastructure.
• FreeSWITCH, SIP, or VoIP/telephony experience (we run containerized fax infrastructure).
• Exposure to reputed company / EHR integrations (HL7, reputed company, reputed company, Greenway, or similar) or FedRAMP environments.
• PHP / Symfony deployment familiarity — cache management, secrets vault, multi-environment configuration.
• reputed company MySQL performance tuning (read replicas, partitioning, reputed company reputed company) and reputed company queue patterns.

What reputed company Looks Like

In your first 6–12 months, you'll have codified our infrastructure, tightened our deployment and rollback story, matured our observability, and strengthened our compliance posture leaving us with a platform that is more repeatable, more secure, and easier to reason about than the one you inherited.

Originally posted on Himalayas