OverviewOverview:We are seeking an experienced Sr Cloud Engineer to design, build, and operate the Cloud infrastructure underpinning HealthEdge's next generation of digital health platforms. This role sits within Cloud Platform Engineering and is central to our company-wide cloud evolution strategy. The ideal candidate combines deep hands-on cloud engineering expertise with a security-first mindset, and can operate independently across a large, multi-account cloud environment.
Areas of Responsibility:Cloud Infrastructure & Architecture- Design, build, and maintain AWS and Azure infrastructure across a multi-account, multi-region environment supporting multiple product lines.
- Build and maintain Infrastructure as Code with reusable, auditable modules.
- Design and implement cross-account IAM patterns, including assume-role trust policies, least-privilege enforcement, and SCP/tagging governance.
- Contribute to capability, scalability, and cost-efficiency planning for current and forecasted infrastructure needs.
CI/CD, Automation, and Delivery- Build, maintain, and evolve CI/CD pipelines enabling automated, secure, and reproducible IaC deployments across HealthEdge.
- Develop custom automation and scripting to reduce manual toil and enforce operational standards.
- Operationalize solutions from proof-of-concept through production, prioritizing repeatability and maintainability.
Reliability, Monitoring, and Incident Response- Monitor, scale, and maintain production resources with availability, performance, and security as top priorities.
- Participate in on-call rotation; troubleshoot production issues, drive root cause analysis, and contribute to incident retrospectives.
- Establish and maintain observability practices and related tooling including metrics, dashboards, and alerting that surface issues before they become incidents.
Security & Compliance- Maintain and strengthen security program controls in accordance with HealthEdge's FedRAMP and HIPAA obligations.
- Build automated security checks into CI/CD pipelines and cloud environments.
- Partner with SecOps on IAM role design, trust policy reviews, and audit evidence for compliance assessments.
Cost & Operational Efficiency- Contribute to FinOps initiatives: identify, diagnose, and remediate cost anomalies.
- Make pragmatic tradeoffs between infrastructure cost, performance, and resource utilization.
AI Enabled Engineering- Use AI coding assistants (GitHub Copilot, Claude Code, Cursor) to accelerate IaC development, scripting, and troubleshooting.
- Use AI tooling to draft first-pass documentation, runbooks, and incident retrospectives; validate and refine before publishing.
- Evaluate emerging AI-assisted operations patterns for applicability to HealthEdge's platform, balancing velocity gains against the compliance and audit requirements.
Collaboration & Documentation- Design and document cloud best practices, guardrails, and reference architectures for use across engineering teams.
- Provide technical expertise to product teams delivering on AWS; recommend and implement process/tooling improvements.
- Maintain awareness of emerging cloud technologies and assess applicability to HealthEdge's platform roadmap.
Required Skills and Experience:- Bachelor's degree in Computer Science or related technical field, or equivalent practical experience.
- 5+ years of hands-on experience in Cloud Engineering, with deep expertise in AWS (EC2, EKS/ECS, IAM, VPC, S3, RDS, CloudWatch).
- Strong Infrastructure as Code experience (Terraform, CDK, or CloudFormation).
- Experience building and maintaining CI/CD pipelines (Jenkins, GitHub Actions, or equivalent).
- Solid understanding of IAM design patterns, including cross-account access and least-privilege enforcement.
- Experience with containerized, cloud-native environments and Kubernetes/EKS.
- Configuration management using Salt/Ansible/Chef/Puppet is essential
- Strong scripting ability (Python, Bash, or PowerShell).
- Experience with configuration management systems (SaltStack, Ansible)
- Security-first mindset, with experience integrating security tooling into development and deployment cycles.
- Excellent troubleshooting and communication skills; able to explain technical tradeoffs to both technical and non-technical stakeholders.
Preferred Skills and Experience:- Experience operating in regulated environments (FedRAMP, HIPAA, SOC 2) and familiarity with what that means for infrastructure design.
- Experience with FinOps practices and cost governance programs.
- AWS certifications (Solutions Architect Associate or Professional).
- Healthcare technology or digital health platform experience.
- Experience leveraging AI coding assistants (GitHub Copilot, Claude, Cursor) as part of daily engineering workflow.
Behaviors & Traits- Comfortable with ambiguity; thrives in a fast-paced, evolving environment.
- Treats every system as production-grade from day one.
- Identifies and raises risk early rather than waiting for it to become an incident.
- Curious and continuously learning; open to feedback.
- Collaborative across teams and functions; strong sense of shared ownership.
- Strives not to repeat the same mistake twice.
Geographic Responsibility: Remote, US
Type of Employment: Full-time, permanent
FLSA Classification (USA Only): Exempt
Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:
- The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus.
- Work across multiple time zones in a hybrid or remote work environment.
- Long periods of time sitting and/or standing in front of a computer using video technology.
- May require travel dependent on company needs.
The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary.
