Senior DevOps Engineer

Nonstop Health; United States; On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental and vision insurance (

401(k) with 4% match

Job summary

Nonstop Health is seeking a Senior DevOps Engineer to own and harden a multi-account AWS platform, shaping CI/CD, secrets management, IAM, and observability for production workloads in a HIPAA-regulated healthcare environment.

You will codify environments with Terraform, drive cost visibility, and lead time-boxed migrations as we move from a monolith to services, maintaining high autonomy and security-minded reliability.

Qualifications

• 6+ years in DevOps / SRE, with 4+ years on AWS running production workloads.
• Fluent in Terraform; you treat infrastructure as reviewed, tested code.
• Strong IAM: cross-account roles, OIDC federation, least-privilege design.
• End-to-end CI/CD ownership (Bitbucket Pipelines, GitHub Actions, or GitLab CI).
• Scripting in Node.js and/or Python; secure networking and monitoring.
• Experience in regulated environments (HIPAA, SOC 2, or PCI).

Responsibilities

• Consolidate deployments onto a single CI/CD pipeline with gated promotions.
• Build and own a secrets-and-key-management program with automated rotation.
• Design least-privilege IAM across a multi-account AWS org.
• Stand up observability and on-call with dashboards and SLOs.
• Codify environments in Terraform and reduce configuration drift.
• Harden production services with idempotency and secure networking.
• Drive migrations from monolith to services and optimize costs.

Skills

DevOps / SRE

AWS production workloads

End-to-end CI/CD ownership

Scripting (Node.js / Python)

IAM design

Tools

Terraform

Bitbucket Pipelines

GitHub Actions

GitLab CI

AWS Secrets Manager

KMS

Job description

Our main offering is a MERP that, when paired with a HDHP, offers first dollar coverage to employees at a lower premium cost. This means people have access to early care without the worry of a copay, coinsurance, or deductible. Ultimately, early care drives down overall cost and improves health and happiness. We think this is the way healthcare should work! Our primary sales channel is selling into brokers. We have a national presence with a growing book of business and expanded product offerings.

Our team at Nonstop is where our magic really comes to life. We are driven, curious, collaborative, passionate, mission oriented, and most of all - we are real people who love what we do and believe in the real impact we are driving for people all over the US.

The Role

We're a health-benefits platform that moves member money and handles protected health data across a multi-account AWS estate that grew faster than its infrastructure. We're hiring a Senior DevOps Engineer to give it a real platform and own it end to end - how code ships, how secrets are managed, how we know when things break. This is a build-and-harden role with high autonomy: you'll set the standards, not inherit them, and the work is felt across the whole engineering org.

What You'll Do

• Consolidate deployments onto a single CI/CD pipeline (Bitbucket Pipelines + OIDC) with gated promotion sandbox ? staging ? production, and hard gates on services that move money.
• Build and own a secrets-and-key-management program (AWS Secrets Manager + KMS) with automated, tested rotation.
• Design least-privilege IAM across a multi-account AWS org, including break-glass and read-only investigative access.
• Stand up observability and on-call -- alarms, dashboards, and SLOs -- for the payment and PHI paths that can't fail quietly.
• Codify every environment in Terraform (remote state + locking) and eliminate configuration drift.
• Harden production services: idempotency, dead-letter queues, kill switches, VPC/PrivateLink egress, and partner-certificate lifecycle.
• Drive time-boxed migrations, including moving a live member-messaging channel off AWS Pinpoint before end-of-life, and support the ongoing monolith-to-services transition.
• Provide cost visibility and optimization across accounts.

What You Bring

• 6+ years in DevOps / SRE, with 4+ years deep on AWS running production workloads.
• Fluent in Terraform; you treat infrastructure as reviewed, tested code.
• Strong IAM: cross-account roles, OIDC federation, least-privilege design.
• End-to-end CI/CD ownership (Bitbucket Pipelines, GitHub Actions, or GitLab CI).
• Secrets/KMS and secure networking (VPC, PrivateLink, NAT, security groups).
• You instrument what you ship and carry a pager for it.
• Confident scripting in Node.js and/or Python.
• Comfortable operating in a regulated environment (HIPAA, SOC 2, or PCI).

Nice To Have

• Payments or healthcare integrations (Stripe, WEX/EDI, NetSuite)
• Track record migrating a monolith to services with safe cutovers
• FinOps / multi-account cost governance
• AWS certifications (Solutions Architect Pro, DevOps Pro, or Security)

Compensation

The base salary range for this role is $140,000 - $180,000 DOE.

Great benefits aren't just for our clients! We cover 100% of medical, dental and vision benefits benefits for employees and dependents. We also contribute to your retirement goals, with a 401k match up to 4%.

***Must be authorized to work for any employer in the United States, this job does not offer visa sponsorship.***