Cloud Platform Engineer: AWS CDK, IaC & Security

Oxbridge Health; Norwalk (CT); On-site; USD 140,000 - 180,000; Full time

Job summary

Oxbridge Health runs healthcare data exchange, member-facing portals, and analytics platforms on AWS. Our multi-account AWS Organization is managed largely as code, with deployments through CodePipeline and SOC 2/HIPAA controls automated rather than documented.

We’re a small team with a large surface area, and you’ll own real systems end to end. You’ll build automation for compliant access management, ship internal chat-native tools and AI features, and improve CI/CD to make deployments safer

Qualifications

• 4+ years in DevOps, SRE, or cloud infrastructure engineering.
• Deep, hands-on AWS experience with IAM, VPC, and cross-account access.
• Proficient with infrastructure as code (AWS CDK strongly preferred).
• Production coding in TypeScript or Python preferred.

Responsibilities

• Build and maintain IaC estate across multiple AWS accounts using CDK.
• Own production services (ECS Fargate, Aurora, Lambda, API Gateway, S3, OpenSearch).
• Improve observability with CloudWatch, Synthetics, and logs policies.
• Automate security and compliance controls (SOC 2/HIPAA) and guardrails.
• Run access management tooling (Okta SSO/SAML, SCIM provisioning).
• Develop internal tooling and dashboards to review compliance and automate tasks.
• Enhance CI/CD workflows and deployment safety.
• Participate in on-call rotations for production infrastructure.

Skills

DevOps

SRE

AWS

CI/CD

Linux

IaC

Tools

AWS CDK

Terraform/CloudFormation

GitHub Actions

CodePipeline

OpenSearch

Job description

Oxbridge Health runs healthcare data exchange, member-facing portals, and analytics platforms on AWS. Our multi-account AWS Organization is managed largely as code, with deployments through CodePipeline and SOC 2/HIPAA controls automated rather than documented.

We’re a small team with a large surface area, and you’ll own real systems end to end. You’ll build automation for compliant access management, ship internal chat-native tools and AI features, and improve CI/CD to make deployments safer