Lead Infrastructure Engineer

Onos Health; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid SF office

Unlimited vacation

Paid parental leave

Medical, dental, vision

Pre-tax commuter benefits

401(k)

Equity for early employees

Mentorship by founders

Team events

Equipment/home office setup

Job summary

Onos Health is hiring an experienced infrastructure engineer in San Francisco for our first dedicated platform role. You will own availability, DR, security, and the end-to-end infrastructure for the Onos platform, working with AI agents and enterprise clients with tight uptime commitments.

As an early team member, you’ll set patterns for future platform engineers, lead SOC 2/HIPAA controls, and build CI/CD pipelines, IaC foundations, and multi-region disaster recovery.

Qualifications

• Deep AWS experience with end-to-end production infra.
• Strong Terraform/IaC and CI/CD expertise.
• Led SOC 2 audit cycles and security controls.
• Experience leading engineering teams as tech lead or manager.
• Familiarity with healthcare or regulated industry is a plus.

Responsibilities

• Own availability, DR, and backup commitments for enterprise clients.
• Stand up production monitoring, SLOs, and on-call rotation.
• Own SOC 2/HIPAA controls, cloud security posture, and audit evidence.
• Build CI/CD pipelines, IaC foundations, and test environments.
• Develop guardrails for AI coding agents and deployment verification.
• Set strategy and operating rhythm for platform work.

Skills

AWS

Terraform/IaC

CI/CD

SRE fundamentals

SOC 2 / HIPAA

Engineering leadership

Python

Django

Cloud security

Tools

Langfuse

KMS/encryption

Cloud security tooling

AWS ECS

Job description

About Onos

Onos Health’s mission is simple but ambitious: ensure every healthcare dollar goes toward delivering the highest quality care. Today, 30% of total U.S. healthcare spending is wasted due to ineffective care and administrative burden caused by misalignment between providers and payers. Onos is addressing this by building the largest AI-driven healthcare data platform. Our models enables payers to make faster, more accurate decisions across their populations. By guiding members to the right care, Onos is channeling more dollars to high-quality care that drives better outcomes while making healthcare more affordable. Onos is well-funded by some of the best healthcare investors and is working with the nation’s largest health plans. Come join a category-defining company and help reimagine healthcare for the better.

Why Onos?

• Meaningful impact: Help fix what is fundamentally broken in healthcare
• Direct collaboration: Work alongside experienced founders with deep healthcare and data expertise
• Culture: Join a high-performing, transparent, and results-oriented team
• Ownership: Significant responsibility and autonomy from day one
• Opportunity: Play a pivotal role in building a fast-growing, category-defining healthcare AI company

The Role

We’re seeking an experienced infrastructure engineer to become our first dedicated platform hire and the owner of the infrastructure the Onos platform runs on. Onos is in production with the nation's largest health plans, which comes with contractual uptime SLAs, disaster recovery commitments, and a security bar (SOC 2, HIPAA) our clients audit. Until now this has been carried collectively by our product engineers and founders — you’ll own it end to end. We build heavily with AI coding agents, so much of your leverage will come from specifying work well and directing agents rather than typing every line yourself; prior tech lead or engineering management experience translates directly. As an early team member, you’ll set the patterns every future platform engineer at Onos inherits. This role is a hybrid role based in San Francisco, where you’ll be expected to work at our office in person 3 times a week.

What you’ll be doing at Onos

• Own our availability, disaster recovery, and backup commitments to enterprise clients — multi-region failover architecture and the recovery exercises that prove it
• Stand up production monitoring, alerting, SLOs, and our on-call rotation and incident response process
• Own the technical controls behind SOC 2 and HIPAA: cloud security posture (AWS org guardrails, IAM least-privilege, KMS/encryption), vulnerability remediation, and continuous audit evidence through Vanta, with a path toward HITRUST
• Build the CI/CD pipelines, Terraform/IaC foundations, preview environments, and test infrastructure the whole team ships on
• Build the guardrails that let AI coding agents ship safely - policy-as-code, deploy verification, and agent-operated operations tooling
• Set the strategy and operating rhythm for platform work: priorities, status, and what we deliberately defer

Technical Challenges At Onos

• Architect AI SRE agents to ensure up-to-date compliance and reliability, enabling engineers to work more effectively and strategically
• Right-size enterprise-grade reliability: SLOs and alerting you can trust without drowning a small team in pager noise
• Turn compliance into continuously verified infrastructure - security controls and audit evidence as code
• Scale a CI/CD and environments platform where AI agents, not just humans, are the primary users
• Support multi-region disaster recovery with defined RTO/RPO targets and immutable, restore-tested backups for a multi-tenant healthcare platform

Tech Stack

• Infrastructure/Systems: AWS (ECS, Bedrock, Glue, etc.), Langfuse, Terraform
• Languages/Frameworks: Backend: Python, Django, Celery / Celery Beat, django-ninja, django-tenants; Frontend: NextJS, Typescript, Tanstack Query, Shadcn UI, Zod, Nuqs; Database/Storage: PostgreSQL (AWS RDS), S3, Clickhouse; Development Tools: Github, Linear, Claude Code, Codex, CoderabbitAI

What we’re looking for

• Deep AWS experience — you’ve owned production cloud infrastructure end to end (IAM, networking, KMS, containers, managed databases)
• Strong Terraform/IaC and CI/CD expertise; you treat pipelines and environments as products with users
• Taken a company through at least one SOC 2 (or HITRUST/ISO 27001) audit cycle with your hands on the technical controls
• SRE fundamentals — SLOs, incident management, DR design — with the judgment to right-size reliability for a startup with enterprise contracts
• Prior experience leading engineering teams as a tech lead or engineering manager — you can break down ambiguous goals, delegate (to humans or AI agents), and communicate crisply with non-technical stakeholders
• Customer obsessed and motivated to make an impact in the healthcare space

Bonus points if you have

• Significant experience in healthcare or another regulated industry, with HIPAA fluency
• Policy-as-code (OPA, Kyverno) or compliance automation (e.g., Vanta, Drata) experience
• Been the first infrastructure hire, or helped found or lead a platform team
• Built internal tooling or infrastructure for LLM/agent systems

Benefits and Perks

• Hybrid arrangement: 3 days/week at San Francisco office (Financial District)
• Unlimited vacation policy
• Paid parental leave
• Medical, dental, and vision insurance
• Pre-tax commuter benefits
• 401(k)
• Significant equity as an early employee
• Direct mentorship from experienced founders
• Ground-floor opportunity to help build a team and culture
• Regular team events and offsites
• Company-provided equipment and home office setup

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.