DevOps Engineer (Contract)

Vytalize; Jordanów; On-site; PLN 180,000 - 240,000; Full time

Job summary

Vytalize is seeking a DevOps Engineer to own IAM, networking, and secure AWS infrastructure. You will implement Terraform-based infrastructure, containerized and serverless services, and data workflows on AWS, with a focus on reliability and observability.

You will participate in on-call, DR planning, and CI/CD for infra, apps, and data jobs, collaborating across security, data, and product teams to deliver scalable healthcare tech solutions.

Qualifications

• Experience designing, provisioning, and operating AWS infrastructure with Terraform.
• Strong knowledge of VPC, subnets, IAM roles, and security controls.
• Experience with containers (Docker) and serverless (Lambda, API Gateway).
• Experience with Databricks on AWS and data workflows.
• Familiarity with monitoring, logging, and incident response.

Responsibilities

• Design, provision, and operate AWS infrastructure using IaC (Terraform).
• Harden networking and security controls (VPCs, NACLs, IAM, KMS).
• Build and maintain containerized services with Docker and ECS/Fargate; manage deployments.
• Develop serverless services with Lambda and API Gateway; integrate with EventBridge and S3.
• Manage Databricks infrastructure; establish isolated dev sandboxes.
• Implement monitoring and incident response, participate in on-call as needed.
• Ensure DR and business continuity; adhere to backup/recovery policies.
• Contribute to CI/CD pipelines with GitHub Actions for infra, apps, and data jobs.
• Document architecture and runbooks.
• Support AI/ML platform enablement with AgentCore and governance controls.

Skills

DevOps

Infrastructure as Code

Cloud engineering

Monitoring/Incident response

CI/CD

Security best practices

On-call readiness

Tools

AWS

Terraform

Docker

ECS/Fargate

Lambda

API Gateway

EventBridge

S3

Databricks

KMS

IAM

VPC

GitHub Actions

Kubernetes / EKS

Job description

Your Opportunity

We’re looking for a DevOps Engineer who builds, solves problems, and multiplies the impact of everyone around them. You’ll own infrastructure-as-code with Terraform, apply site reliability practices that keep our platforms stable and observable, and build the resilient systems our data and application teams rely on. You’ll do your best work on our small, growing team, where people ship quickly and support one another. This is a chance to help shape a leading healthcare technology company.

Infrastructure & Cloud Engineering

• Design, provision, and operate AWS infrastructure with infrastructure as code (Terraform), including reusable modules and environment-specific configurations

• Configure and harden core AWS networking and security constructs, including VPCs, subnets, routing, NACLs, security groups, IAM roles and policies, KMS keys, and parameter and secret management

• Implement and operate containerized services with Docker and AWS ECS/Fargate, including image pipelines, task definitions, service autoscaling, and blue-green or rolling deployments

• Build and maintain serverless services with AWS Lambda and API Gateway, including event-driven integrations with EventBridge and S3

• Manage and operate Databricks infrastructure on AWS, including cluster configuration, workspace management, PrivateLink networking, and identity federation

• Design and implement isolated development sandbox environments for secure data job execution

Reliability, Monitoring & Incident Response

• Implement comprehensive monitoring, logging, and alerting in CloudWatch (metrics, logs, dashboards, alarms) and integrate alerts with incident channels

• Participate in production support including on-call responsibilities as needed, and drive post-incident reviews and reliability improvements

• Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to policy

CI/CD & Deployment

• Build, maintain, and optimize CI/CD pipelines in GitHub Actions for infrastructure (Terraform workflows),applications (container, serverless, and data jobs) and agent deployments

• Adhere to the Change Management policy, including documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment

• Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices

Documentation & Operational Standards

• Document architecture, runbooks, and standard operating procedures for build, release, disaster recovery, and incident response

• Contribute code reviews and implementation across multiple languages (Python, TypeScript, Go, Terraform/HCL), upholding secure coding and operational best practices

AI & Governance

• Support AI/ML platform enablement with AgentCore infrastructure, governance controls, and access patterns

• Implement infrastructure for AI-powered operational tools (e.g., self-healing systems, security vulnerability remediation agents)

Security & Compliance

• Coordinate with the Information Security team to securely configure and maintain applications with secure authentication mechanisms, role-based access, and support for access reviews in accordance with the Identity Management Authentication and Access Control and Data and Platform Security policies

• Adhere to the Change Management policy, which includes documenting, reviewing, and obtaining approval for all normal and emergency changes prior to deployment; submit a change request, ensure an information security impact assessment is completed, coordinate pre-implementation activities, and ensure approvals are in place prior to implementation

• Maintain accountability for secure software development practices, including secure coding standards, vulnerability scanning, and remediation prior to production deployment

• Apply hardening standard configurations in conjunction with Information Security and ensure vulnerabilities are remediated in accordance with the Vulnerability Management policy

• Ensure firewall configurations align with Data and Platform policy, including documentation with justifications for all rule changes, removal of obsolete rules, and participation in Information Security firewall rule reviews

• Support Vytalize disaster recovery and business continuity objectives, including adherence to documented backup and recovery procedures, ensuring backups are encrypted, stored securely, and retained according to Vytalize policies

• Maintain accurate and up-to-date inventories of hardware, software, and cloud assets throughout their lifecycle from acquisition to decommissioning, ensuring assets are classified, assigned to owners, tracked in approved systems, and aligned with Information Security policies

PREFERRED QUALIFICATIONS

• On-call experience and comfort with incident response, including runbook creation and post-incident analysis

• Experience with policy-as-code and guardrails (e.g., SCPs, IAM boundaries, OPA/Conftest)

• Familiarity with secrets management and parameterization (AWS Secrets Manager, SSM Parameter Store)

• Experience with AWS EKS / Kubernetes deployment and operations

• Exposure to cost optimization, tag policies, and FinOps practices

• Federated identity and access management: OIDC, SAML, Entra ID, Cognito, and workload identity federation for CI/CD

• Databricks experience (clusters, jobs, permissions, metastores) and integration with cloud networking and identity

• Streaming and data pipeline experience with Kinesis, EventBridge Scheduler, or equivalent managed services

• Experience with compliance automation tooling and SOC2 evidence collection

• Compliance automation and evidence tooling that supports SOC 2 controls in cloud environments

• Experience with data quality and observability platforms

• Knowledge of data anonymization and privacy-preserving infrastructure patterns

• Exposure to AI agent frameworks or LLM-based tooling (e.g., AWS Bedrock/AgentCore, LangChain, or similar) is a big plus

• Experience building or operating infrastructure for AI/ML workloads