DevOps Engineer

Deciphex; United States; Remote; USD 100,000 - 145,000; Full time

Benefits offered by this job

Healthcare benefits

Annual leave

Remote-friendly culture

Job summary

Deciphex is seeking a Senior DevOps/SRE to own production infrastructure and connectivity across our cloud platforms. You will drive architectural decisions, implement as-code networking, and mentor teammates while joining an on-call rotation.

You will operate and scale AWS/EKS based services, enforce security standards, and ensure high availability with automated recovery drills. This role offers remote work with occasional travel for in-person collaboration.

Qualifications

• 5/6++ years in DevOps, SRE or infrastructure engineering; focus on production ownership.
• Deep Linux/Win networking: iptables/nftables, routing, DNS and TLS; ability to reason line-by-line rule sets.
• Site-to-site VPN and private connectivity (IPsec, WireGuard or OpenVPN) and tracing flows with flow logs and packet capture.
• Kubernetes in production, ideally Amazon EKS: Helm, hardened Docker images, and debugging with kubectl.
• Infrastructure as code in production, ideally Terraform (or OpenTofu), including injecting secrets as code; will write it from week one.
• AWS administration: trust to change VPCs, endpoints, RDS and IAM safely.
• Disciplined production change: peer review, monitoring, runbooks and tested recovery.
• Knowledge of Windows and Linux networking, CI/CD, secrets management, SSO or federation.
• Experience with cloud-based healthcare integration (e.g. HL7 or FHIR), laboratory connectivity to cloud, GPU or research cloud environments, or regulated environment helps but not required.

Responsibilities

• Run and scale our customer connectivity services on EKS, with monitoring, firewall rules and certificates.
• Provide, as code (Terraform and Helm), the connectivity, network policy and secrets that teams need to connect new customers and laboratories.
• Operate and upgrade our cloud-hosted integration and laboratory platform services with high availability and backup.
• Run disaster-recovery exercises and keep the evidence.
• Own secure network access to our GPU and research compute across cloud providers.
• Shape the shared network and connectivity layer of our AWS multi-account platform (landing zone), as part of the DevOps team.
• Build the monitoring, flow-log analysis and alerting that finds faults before a laboratory or customer does.
• Patch and harden the cluster, nodes and images, following the security team's standards.
• Document the estate as code, join the on-call rota (planned changes happen outside laboratory hours), and mentor colleagues.

Skills

Kubernetes

AWS (EKS)

Terraform

Networking

Security

Tools

Helm

kubectl

Docker

OpenVPN/WireGuard

Job description

Описание

Role type & Location - Full time Remote (Work from home) based either Dublin or UK only - Occasional Travel to Dublin office if Ireland based (Glasnevin) or UK (Oxford) if UK based Visa - We regret we cannot offer Irish or UK visa sponsorship for this role

What This Is NOT

• Not an IT, helpdesk or end-user support role.
• Not an infrastructure ticket-queue role.
• Not a product CI/CD ownership role.
• The DevOps team owns it, and you contribute as part of that team.
• Not a role with hand-built servers. If it cannot be rebuilt from code, it is not finished.

What You help us with

• You work as part of a lean DevOps team. Lab Systems engineers own on-premises laboratory applications and you own the connectivity to them. Research and data science teams own their platforms and you own the secure network access to them. Cybersecurity and Data Security engineers set the security standards you implement.
• This is a senior, hands-on role with real ownership.
• You will set technical direction, make the design decisions, and be the person others rely on when it breaks. This includes;
• Run and scale our customer connectivity services on EKS, with monitoring, firewall rules and certificates.
• Provide, as code (Terraform and Helm), the connectivity, network policy and secrets that teams need to connect new customers and laboratories. We do not use click-ops.
• Operate and upgrade our cloud-hosted integration and laboratory platform services with high availability and backup.
• Run disaster-recovery exercises and keep the evidence.
• Own secure network access to our GPU and research compute across cloud providers. The research platform and ML tooling stay with the research teams.
• Shape the shared network and connectivity layer of our AWS multi-account platform (landing zone), as part of the DevOps team.
• Build the monitoring, flow-log analysis and alerting that finds faults before a laboratory or customer does.
• Patch and harden the cluster, nodes and images, following the security team's standards.
• Document the estate as code, join the on-call rota (planned changes happen outside laboratory hours), and mentor colleagues.

Задачи

The cloud connectivity a new customer, internal team or laboratory needs is provided as code, through a predictable process, and documented. Faults are found by monitoring before laboratory staff or customers report them. Recovery is tested regularly, with evidence.

Требования

• 5/6++ years in DevOps, SRE or infrastructure engineering; focus on production ownership.
• Deep Linux/Win networking: iptables/nftables, routing, DNS and TLS; ability to reason line-by-line rule sets.
• Site-to-site VPN and private connectivity (IPsec, WireGuard or OpenVPN) and tracing flows with flow logs and packet capture.
• Kubernetes in production, ideally Amazon EKS: Helm, hardened Docker images, and debugging with kubectl.
• Infrastructure as code in production, ideally Terraform (or OpenTofu), including injecting secrets as code; will write it from week one.
• AWS administration: trust to change VPCs, endpoints, RDS and IAM safely.
• Disciplined production change: peer review, monitoring, runbooks and tested recovery.
• Knowledge of Windows and Linux networking, CI/CD, secrets management, SSO or federation.
• Experience with cloud-based healthcare integration (e.g. HL7 or FHIR), laboratory connectivity to cloud, GPU or research cloud environments, or regulated environment helps but not required.

Условия

• Salary with performance-based annual increases to recognise your contribution.
• Healthcare benefits to support your wellbeing.
• Annual leave plus additional Christmas leave to rest and recharge.
• Meaningful work that helps improve patient outcomes.
• A growing company where you can make your mark.
• Varied, challenging projects to keep you learning.
• Regular feedback and career opportunities to help you progress.
• A supportive, multicultural team to share ideas and learn from.

Through the work that we do, the team at Deciphex helps pharma to accelerate the process of essential drug development and helps cancer patients get a timely and accurate diagnosis. Founded in Dublin (Ireland) in 2017, Deciphex has scaled rapidly to a team of over 230 people and counting who are providing software solutions to address the pathology gap in research pathology and clinical areas. We have offices in Dublin, Exeter, Oxford, Chicago and Toronto, and are expanding our team throughout the world.

We are software developers, clinical specialists, artificial intelligence engineers, operations professionals and so much more, all working as one team to support our customers and patients.

Read more about Deciphex here and more about our team on our Careers Page here.

Deciphex is an equal opportunities employer and we are committed to the principle of equality.

All qualified applicants will be considered for employment without regard to age, race, religious beliefs, political views, gender identity, affectional or sexual orientation, national origin, family or marital status (including pregnancy), disability, membership of the travelling community or any other classification protected by applicable law.

A copy of our Privacy Policy can be viewed here.