[Remote] DevOps Engineer

Note: The job is a remote job and is open to candidates in USA. Data Dimensions is seeking an experienced Infrastructure / DevOps Engineer to own and evolve the cloud infrastructure behind their HIPAA-compliant healthcare document processing platform. The role involves designing, automating, securing, and troubleshooting systems to ensure the reliability of a multi-tenant platform.

Responsibilities

• Own the reliability, performance, and security of our AWS production environment (EC2, ALB, Aurora MySQL, S3, ECS, CloudWatch, SNS, IAM, VPC)
• Design, build, and maintain CI/CD pipelines for PHP/Symfony and React applications, from commit through production promotion, including automated security gates (Aikido) that block vulnerable builds before they ship
• Stand up and mature our infrastructure-as-code practice — provisioning and configuration currently managed directly, with room to own the migration to a codified, repeatable model
• Build and tune centralized logging, monitoring, and alerting across CloudWatch and Datadog so issues surface before customers notice them; help drive our ongoing Datadog rollout
• Manage container workloads (Docker on ECS), including our specialized FreeSWITCH fax/telephony containers
• Own the infrastructure that our distributed system of independently scaled microservices runs on — per-service ECS auto-scaling, load balancing, and resource right-sizing for both horizontal and vertical scaling. Understand how the stateless services behave and partner closely with engineering on their scaling, deployment, and performance
• Support database reliability and performance work across Aurora MySQL (read replicas, partitioning, query tuning) and MongoDB
• Harden the platform against the threat classes relevant to PHI systems, and support ongoing penetration-test remediation
• Manage secrets, keys, and access across environments (AWS, Symfony secrets vault, Docker secrets, Bitbucket)
• Partner with engineering to improve deployment safety, rollback, and multi-environment (Dev / UAT / Prod) parity

Skills

• Linux server administration, with specific proficiency in Ubuntu 24.04 LTS
• AWS cloud infrastructure — hands-on production experience with EC2, ALB/ELB, Aurora/RDS MySQL, S3, ECS, CloudWatch, IAM, VPC, and security groups
• Docker — building, running, and troubleshooting containerized services in a production environment
• CI/CD pipeline design and maintenance, specifically Bitbucket Pipelines — branching strategy, environment promotion, build/test/deploy stages, and pipeline troubleshooting
• Bash scripting for automation, system administration, and pipeline support
• Centralized logging and observability — configuration, aggregation, dashboards, and alerting in AWS CloudWatch and Datadog (we are actively rolling Datadog out; hands-on Datadog experience is a strong plus). Familiarity with ELK stack or Splunk also welcome
• Web server operations — Apache and PHP-FPM configuration, tuning, and troubleshooting behind a load balancer
• Database operations support — MySQL (Aurora/RDS) administration, backup/restore, and performance troubleshooting; exposure to MongoDB
• Secrets and access management — SSH key lifecycle, API token management, and environment-scoped secrets
• Distributed systems and stateless scaling — strong working understanding of a distributed system of many independently scaled, stateless microservices, and the ability to operate the infrastructure it runs on (auto-scaling policies, load balancing, externalized session/state such as Redis/S3, and resource right-sizing) while partnering with engineering on scaling and deployment
• SFTP administration and secure file transfer — configuring, hardening, and troubleshooting SFTP servers and automated file exchange with external partners and EHR systems (chroot/jailing, key- and password-based auth, transfer automation, and monitoring)
• Working understanding of operating infrastructure that stores and transmits PHI under HIPAA — encryption at rest and in transit, audit logging, least-privilege access, and network isolation
• Experience integrating and operating automated security scanning and CI/CD security gates — SAST/DAST, dependency (SCA), container, and IaC scanning, and secrets detection. We use Aikido; equivalent tooling (Snyk, Semgrep, Trivy, etc.) transfers
• Familiarity with common web application vulnerability classes (IDOR, injection, host header injection, broken cryptography) and their infrastructure-level mitigations
• Experience supporting audit, penetration-test remediation, or compliance activities
• Infrastructure-as-code — Terraform and/or Ansible. You would help stand this up from our current state, so demonstrated experience codifying existing infrastructure is highly valued
• ECS orchestration at scale; Kubernetes experience a plus if we expand orchestration
• Jenkins or other CI/CD systems beyond Bitbucket Pipelines
• AWS SNS / notification and messaging infrastructure
• FreeSWITCH, SIP, or VoIP/telephony experience (we run containerized fax infrastructure)
• Exposure to healthcare / EHR integrations (HL7, NextGen, Athena, Greenway, or similar) or FedRAMP environments
• PHP / Symfony deployment familiarity — cache management, secrets vault, multi-environment configuration
• Aurora MySQL performance tuning (read replicas, partitioning, index strategy) and MongoDB queue patterns

Company Overview