The RoleWe're seeking an experienced infrastructure engineer to become our first dedicated platform hire and the owner of the infrastructure the Onos platform runs on. Onos is in production with the nation's largest health plans, which comes with contractual uptime SLAs, disaster recovery commitments, and a security bar (SOC 2, HIPAA) our clients audit. Until now this has been carried collectively by our product engineers and founders - you'll own it end to end. We build heavily with AI coding agents, so much of your leverage will come from specifying work well and directing agents rather than typing every line yourself; prior tech lead or engineering management experience translates directly. As an early team member, you'll set the patterns every future platform engineer at Onos inherits. This role is a hybrid role based in San Francisco, where you'll be expected to work at our office in person 3 times a week.
What you'll be doing at Onos:- Own our availability, disaster recovery, and backup commitments to enterprise clients - multi-region failover architecture and the recovery exercises that prove it
- Stand up production monitoring, alerting, SLOs, and our on-call rotation and incident response process
- Own the technical controls behind SOC 2 and HIPAA: cloud security posture (AWS org guardrails, IAM least-privilege, KMS/encryption), vulnerability remediation, and continuous audit evidence through Vanta, with a path toward HITRUST
- Build the CI/CD pipelines, Terraform/IaC foundations, preview environments, and test infrastructure the whole team ships on
- Build the guardrails that let AI coding agents ship safely - policy-as-code, deploy verification, and agent-operated operations tooling
- Set the strategy and operating rhythm for platform work: priorities, status, and what we deliberately defer
Technical Challenges At Onos:- Architect AI SRE agents to ensure up-to-date compliance and reliability, enabling engineers to work more effectively and strategically
- Right-size enterprise-grade reliability: SLOs and alerting you can trust without drowning a small team in pager noise
- Turn compliance into continuously verified infrastructure - security controls and audit evidence as code
- Scale a CI/CD and environments platform where AI agents, not just humans, are the primary users
- Support multi-region disaster recovery with defined RTO/RPO targets and immutable, restore-tested backups for a multi-tenant healthcare platform
Tech Stack:At Onos, we work with a modern tech stack where we continuously evaluate and adopt cutting-edge technologies as we scale.
- Infrastructure/Systems: AWS (ECS, Bedrock, Glue, etc.), Langfuse, Terraform
- Languages/Frameworks
- Backend: Python, Django, Celery / Celery Beat, django-ninja, django-tenants
- Frontend: NextJS, Typescript, Tanstack Query, Shadcn UI, Zod, Nuqs
- Database/Storage: PostgreSQL (AWS RDS), S3, Clickhouse
- Development Tools: Github, Linear, Claude Code, Codex, CoderabbitAI
What we're looking for:- Deep AWS experience - you've owned production cloud infrastructure end to end (IAM, networking, KMS, containers, managed databases)
- Strong Terraform/IaC and CI/CD expertise; you treat pipelines and environments as products with users
- Taken a company through at least one SOC 2 (or HITRUST/ISO 27001) audit cycle with your hands on the technical controls
- SRE fundamentals - SLOs, incident management, DR design - with the judgment to right-size reliability for a startup with enterprise contracts
- Prior experience leading engineering teams as a tech lead or engineering manager - you can break down ambiguous goals, delegate (to humans or AI agents), and communicate crisply with non-technical stakeholders
- Customer obsessed and motivated to make an impact in the healthcare space
Bonus points if you have:- Significant experience in healthcare or another regulated industry, with HIPAA fluency
- Policy-as-code (OPA, Kyverno) or compliance automation (e.g., Vanta, Drata) experience
- Been the first infrastructure hire, or helped found or lead a platform team
- Built internal tooling or infrastructure for LLM/agent systems
Benefits and Perks- Hybrid arrangement: 3 days/week at San Francisco office (Financial District)
- Unlimited vacation policy
- Paid parental leave
- Medical, dental, and vision insurance
- Pre-tax commuter benefits
- 401(k)
- Significant equity as an early employee
- Direct mentorship from experienced founders
- Ground-floor opportunity to help build a team and culture
- Regular team events and offsites
- Company-provided equipment and home office setup
