> Markdown version of [/jobs/ext/2710271-devops-engineer](https://www.wearedevelopers.com/jobs/ext/2710271-devops-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevOps Engineer - **Company:** OXBRIDGE HEALTH, INC. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Amazon S3, JIRA, Cloud Computing, System Configuration, Continuous Integration, Data Infrastructure, Software Debugging, DevOps, Github, Google Talk, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Linux System Administration, Windows Servers, OpenVPN, OpenID, Role-Based Access Control, Next.js, Message Oriented Middleware, Security Assertion Markup Language (SAML), TypeScript, AWS Cdk, File Transfer Protocol (FTP), Okta, ReactJS, Delivery Pipeline, Large Language Models, Amazon Virtual Private Cloud (VPC), AWS ECS, Cloudformation, Production Code, Cloudflare, AWS Fargate, Route53, Functional Programming, Cloudwatch, Api Gateway, Terraform, Webhooks, Static Application Security Testing - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/devops-engineer-oxbridge-health-9490071 ## About the Role * 4+ years in DevOps, SRE, platform, or cloud infrastructure engineering. * Deep, hands-on AWS: You can reason about IAM trust policies, VPC networking, and cross-account access without a diagram. * Real Infrastructure-as-Code experience: AWS CDK strongly preferred; Terraform/CloudFormation background transfers fine, but you'll be writing TypeScript CDK here. * Production Coding: Comfortable writing production code, not just config (TypeScript and/or Python). * CI/CD Pipeline Ownership: GitHub Actions, CodePipeline, or equivalent. * Containers on AWS: ECS or EKS, image builds, ECR, task/service configuration. * Linux Administration: Shell fluency; comfortable on a box with systemctl, journalctl, and no GUI. * Identity Systems: SSO/SAML/OIDC, IAM roles vs. users, least privilege in practice. * Clear Written Communication: Our runbooks, PR descriptions, and incident notes are how the team scales. Optional Qualifications * Healthcare, fintech, or another regulated environment; HIPAA or SOC 2 audit experience. * AWS Organizations at scale: SCPs, Control Tower, Identity Center, multi-account CDK bootstrapping. * Data platform exposure: Glue, Athena, QuickSight, Lake Formation, DMS. * Amazon Bedrock or other LLM API work-we build with Claude and are actively expanding internal AI tooling. * Windows Server administration via SSM (a slice of our analytics estate is Windows). * OpenVPN Access Server, Cloudflare, Route 53 at an operational level. * Next.js / React-several internal dashboards are full-stack and you'd own them soup to nuts. ## Description * Build and maintain our IaC estate: We run a fleet of TypeScript AWS CDK repos (one per platform: message bus, SFTP exchange, OpenSearch, org policies, and more) deploying via CodePipeline into a dozen+ accounts. You'll extend existing stacks, split monoliths apart cleanly, and bootstrap new accounts into the pattern. * Own production services: ECS Fargate behind ALBs, Aurora, Lambda, API Gateway, S3, AWS Transfer Family for partner SFTP, OpenSearch, DMS replication. Deploy, monitor, right-size, and debug them. * Make observability actually catch things: CloudWatch alarms, Synthetics canaries, VPC flow logs, CloudTrail, log retention and redaction policies. We care about the difference between an alarm that exists and an alarm that pages someone. * Automate security and compliance: Service Control Policies as guardrails, IAM Identity Center permission sets, Prowler-driven evidence collection into WORM storage for SOC 2, secret scanning and SAST in PR pipelines. You'll help move controls from "reviewed quarterly" to "enforced continuously." * Run access management as a product: Okta SSO/SAML, SCIM provisioning, our OpenVPN Access Server fleet, and the approval-gated automation that provisions VPN and AWS access from a Jira ticket or a chat command. * Build internal tooling: A lot of our ops surface is chat-native: Google Chat bots and webhooks that review PRs, report compliance drift, page on-call, and provision access. Several are LLM-backed on Amazon Bedrock. You'll ship these, not just consume them. * Improve CI/CD: GitHub Actions workflows, PR gates, org rulesets, auto-merge policy, deployment safety (changeset previews before anything touches prod). * On-call rotation: Participate in on-call for production infrastructure. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [DevOps at Netflix](https://www.wearedevelopers.com/videos/270-devops-at-netflix) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [My journey into DevOps world - How it all started!](https://www.wearedevelopers.com/videos/545-my-journey-into-devops-world-how-it-all-started) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [DevOps Engineer Salary [2023]](https://www.wearedevelopers.com/magazine/203-devops-engineer-salary-2023) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)