Senior Platform Engineer

Overview

Help us build and operate the AWS and Azure platforms behind HealthEdge’s healthcare payer products, a multi account/subscription, multi-region environment. As a Senior Platform Engineer on Cloud Platform Services, you will own infrastructure platform projects from design through production and build the self-service tooling and guardrails that let teams deploy infrastructure at scale across the organization.

Platform and Infrastructure as Code

• Design, build, and maintain AWS and Azure infrastructure platform automation across a multi-account/subscription, multi-region environment supporting multiple product lines.

• Build reusable, versioned, auditable infrastructure modules in IaC, and convert existing Terraform, CloudFormation, and Bicep/ARM templates to the corporate IaC standard.

• Design cross-account/subscription identity and access patterns (e.g., AWS IAM assume-role trust policies, Azure Entra ID and RBAC), least-privilege enforcement, and organization-level policy and tagging governance (e.g., AWS SCPs, Azure Policy).

• Build self-service tooling, templates, and reference patterns that make it easy for product teams to deploy safely on our chosen cloud providers.

Project Ownership and Technical Leadership

• Take projects from proposal through production with minimal direction: scope, plan, break down work, and communicate status and risk.

• Mentor engineers through design reviews, code reviews, and pairing.

• Set and document cloud best practices, guardrails, and reference architectures for use across engineering teams.

CI/CD and Automation

• Build and evolve CI/CD pipelines for automated, secure, and reproducible IaC deployments across HealthEdge.

• Develop automation and scripting (Python, Bash) to reduce manual toil and enforce operational standards, including configuration management with SaltStack and Ansible.

• Operationalize solutions from proof-of-concept through production, prioritizing repeatability and maintainability.

Reliability and Incident Response

• Build and maintain the tooling and automation that deploy and manage the metrics, dashboards, and alerting standards set by the Observability and service teams, using AWS and Azure native monitoring services, while keeping the underlying infrastructure scalable, available, and secure.

• Participate in the Level 3 (L3) escalation on-call rotation, providing expert infrastructure troubleshooting for issues escalated from L1/L2 support and application teams; drive root cause analysis, contribute to incident retrospectives, and turn findings into automation, runbooks, and platform improvements.

Security and Compliance

• Maintain and strengthen security program controls for HealthEdge's FedRAMP and HIPAA obligations (and SOC 2) by encoding them in IaC modules and policy-as-code, so controls are enforced by default.

• Build automated security checks into CI/CD pipelines and cloud environments.

• Partner with SecOps on identity and access role design, trust and delegation reviews, and audit evidence for compliance assessments.

Cost and AI-Enabled Engineering

• Contribute to FinOps initiatives: identify, diagnose, and remediate cost anomalies, and make pragmatic tradeoffs between cost, performance, and utilization.

• Use AI coding assistants (GitHub Copilot, Claude Code, Cursor) to accelerate IaC development, scripting, troubleshooting, and first-pass documentation, and validate output before publishing.

• Evaluate emerging AI-assisted operations patterns for applicability to HealthEdge's platform, balancing velocity gains against compliance and audit requirements.

Required Skills and Experience

• 6+ years of hands-on cloud engineering experience, with deep expertise in AWS or Azure (e.g., EC2/Azure VMs, EKS/ECS/AKS, IAM/Entra ID, VPC/VNet, S3/Blob Storage, RDS/Azure SQL) and working knowledge of the other.

• Strong AWS CDK experience in Python.

• Track record of owning and delivering multi-month infrastructure projects end to end.

• Infrastructure as Code experience with Terraform and/or cloud-native templating (CloudFormation, Bicep/ARM) in addition to CDK.

• Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, or equivalent).

• Solid understanding of IAM design patterns (AWS IAM, Azure Entra ID/RBAC), including cross-account/subscription access and least-privilege enforcement.

• Experience with containerized, cloud-native environments and Kubernetes (EKS and/or AKS).

• Configuration management experience: SaltStack is essential, or Ansible, Chef, or Puppet with a willingness to learn Salt.

• Strong scripting ability: Python required; Bash or PowerShell.

• Security-first mindset, with experience integrating security tooling into development and deployment cycles.

• Excellent troubleshooting and communication skills, including experience resolving escalated (L3) infrastructure incidents; able to explain technical tradeoffs to both technical and non-technical stakeholders.

• Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience.

Preferred Skills and Experience

• Experience building tooling and automation to deploy observability standards (metrics, dashboards, and alerting) using AWS and Azure native monitoring services.

• Experience mentoring or technically leading other engineers.

• Experience operating in regulated environments (FedRAMP, HIPAA, SOC 2) and familiarity with what that means for infrastructure design.

• Experience with FinOps practices and cost governance programs.

• AWS or Azure certifications (e.g., AWS Solutions Architect Associate or Professional, Azure Solutions Architect Expert).

• Healthcare technology or digital health platform experience.

• Comfortable with ambiguity; thrives in a fast-paced, evolving environment.

• Treats every system as production-grade from day one.

• Identifies and raises risk early rather than waiting for it to become an incident.

• Curious and continuously learning; open to feedback.

• Collaborative across teams and functions; strong sense of shared ownership.

• Strives not to repeat the same mistake twice.

Geographic Responsibility: Remote, US

Type of Employment: Full-time, permanent

FLSA Classification (USA Only): Exempt

Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:

• The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

• Work across multiple time zones in a hybrid or remote work environment.

• Long periods of time sitting and/or standing in front of a computer using video technology.

• May require travel dependent on company needs.

The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990. Candidates may be required to go through a pre-employment criminal background check.

HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabilities.

#LI-Remote

**The annual US base salary range for this position is $110,000 to $117,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will be determined during the interview process and is based on a combination of factors including, but not limited to, your skills, experience, qualifications and education.