Senior DevOps Engineer

Senior DevOps Engineer

About the Role

We are a mission-driven HealthTech company dedicated to building secure, scalable, and innovative software solutions that improve healthcare outcomes. We are looking for a highly skilled Senior DevOps Engineer to own the infrastructure and delivery backbone behind our products. In this role, you will be the technical anchor for everything that runs in production: designing cloud architecture, codifying it, automating the path from commit to release, and making sure our systems meet the strict security and privacy standards required in healthcare.

You will build and operate our AWS environments using Infrastructure as Code, run our CI/CD pipelines, and put observability in place so problems surface before users feel them. You will also champion a modern engineering workflow where engineers act as orchestrators of AI assistants, using them to accelerate infrastructure work without ever loosening the review bar. If you care about reliability, automation, and building systems that handle patient data responsibly, this is the role for you.

Key Responsibilities

• Cloud Architecture & IaC: Design, build, and operate scalable and fault-tolerant AWS environments. Define all infrastructure as code using Terraform, with reusable modules, clear state management, and environment parity across dev, staging, and production.

• Containers & Orchestration: Build and maintain containerized workloads using Docker and Kubernetes (EKS). Own cluster configuration, autoscaling, resource limits, networking, and deployment strategies such as blue-green and canary releases.

• CI/CD & Release Engineering: Design and maintain automated pipelines (GitLab CI, GitHub Actions, or similar) covering build, test, security scanning, and deployment. Reduce lead time to production while keeping releases safe and reversible.

• Security & Compliance: Enforce security best practices for patient data across the stack: IAM least privilege, secrets management, encryption at rest and in transit, network segmentation, vulnerability scanning, and patch management. Support and evidence compliance requirements such as ISO 27001, PDPA, HIPAA, and GDPR, and work with security and audit stakeholders during reviews.

• Observability & Reliability: Implement monitoring, logging, tracing, and alerting (CloudWatch, Prometheus, Grafana, ELK, or equivalents). Define SLIs and SLOs with product teams, tune alerts to cut noise, and drive incident response and blameless postmortems that produce real fixes.

• Cost & Performance Optimization: Track cloud spend, right-size resources, and tune performance so growth does not become a budget problem.

• Developer Enablement: Treat the platform as a product. Build self-service tooling, templates, and documentation so product engineers can ship independently without filing tickets for routine work.

• Technical Documentation: Produce and maintain clear runbooks, architecture diagrams, network diagrams, and incident procedures so the team shares one accurate picture of how the system works.

• AI as a Coding Co-Worker (Orchestration): Act as the orchestrator directing AI tools (such as Claude Code, Cursor, or GitHub Copilot) acting as the worker. Write precise prompts to generate Terraform modules, pipeline definitions, and operational scripts, orchestrate multi-step refactoring, and critically review every AI-generated change for security, correctness, and blast radius before it reaches production.

Required Skills & Qualifications

• Experience: 5+ years in DevOps, SRE, platform, or cloud infrastructure engineering, including hands-on ownership of production systems.

• Cloud Expertise: Strong, production-level proficiency with AWS (VPC, EC2, ECS/EKS, RDS, S3, IAM, CloudFront, Route 53, CloudWatch) and a solid grasp of how these services fit together under load.

• Infrastructure as Code: Advanced hands-on experience with Terraform, including module design, remote state, and managing infrastructure changes safely through code review.

• Containers & Kubernetes: Proven experience running containerized production workloads with Docker and Kubernetes, including Helm and deployment strategy design.

• CI/CD: Strong experience designing and maintaining pipelines end to end, with automated testing and security gates built in.

• Observability: Practical experience instrumenting systems and running monitoring, logging, and alerting stacks, plus real incident response experience.

• Scripting & Automation: Proficiency in at least one of Bash, Python, or Go, used to automate operational work rather than repeat it.

• Networking & Linux: Solid understanding of Linux administration, DNS, TLS, load balancing, firewalls, and network troubleshooting.

• Security Mindset: Working knowledge of data security principles, encryption, secrets management, and safe handling of sensitive data.

• AI Orchestration Skills: Hands-on use of AI assistants beyond autocomplete. You know how to break infrastructure work into actionable prompts, guide an AI agent through a multi-step task, and rigorously validate its output before it ships.

Nice to Have

• Prior experience in HealthTech or familiarity with healthcare compliance standards (HIPAA, PDPA, HL7, FHIR, GDPR).

• Experience supporting ISO 27001 certification or surveillance audits.

• Exposure to service mesh, API gateways, or multi-account AWS organization design.

• Experience with database operations and backup/restore strategy across SQL and NoSQL (PostgreSQL, MySQL, MongoDB).

• Familiarity with GitOps tooling (ArgoCD, Flux) and policy as code (OPA, Checkov, tfsec).

• Experience supporting mobile and web release pipelines (React Native, Next.js, NestJS).

Work Location

• Office next to BTS Chong Nonsi

• Monday–Friday | 09:30–18:30

• Hybrid Work – 4 days in-office / 1 day WFH