DevOps / AgentOps Engineer

This is a hybrid infrastructure and AI operations role - part traditional DevOps, part emerging AgentOps discipline. The DevOps/AgentOps Engineer owns the CI/CD pipelines, infrastructure-as-code, observability stack, and deployment automation for both the application platform and the AI agent layer. They work shoulder-to-shoulder with the Full-Stack and Backend engineers, guide and learn from KMS’s build process, and own the shared services infrastructure on the Revelation Pharma side. This is a high-autonomy role for someone who wants to define how a modern health-AI platform is built, deployed, and monitored from day one.

Job Activities and Responsibilities: The responsibilities listed below are subject to change.

• Design, build, and maintain CI/CD pipelines for application code, FHIR data layer, and AI agent deployments across dev/staging/production environments
• Own infrastructure-as-code (Terraform or AWS CDK) for all AWS services including HealthLake, Bedrock, Clean Rooms, Lambda, Step Functions, S3, and IAM
• Build and operate the observability stack - logging, metrics, tracing, and alerting - with particular attention to agent execution observability (token usage, latency, state transitions, error rates)
• Implement and maintain HIPAA-compliant infrastructure patterns: encryption at rest and in transit, key rotation, audit log pipelines, BAA-covered service configurations
• Work directly alongside KMS engineers during the build phase - reviewing their IaC, ensuring deployment standards are met, and absorbing system knowledge for long-term internal ownership
• Manage shared services infrastructure on the Revelation Pharma side, including cross-environment networking, secrets management, and service mesh configuration
• Automate agent deployment, versioning, rollback, and A/B testing workflows for Bedrock-based agents
• Establish and enforce environment parity, secrets hygiene, and least-privilege IAM policies across all workstreams

Do you have a valid AWS Certified Security - Specialty certification?, Do you have experience in Virtual Private Clouds?, * AWS Infrastructure (Expert): Deep hands-on experience with IAM policy design, VPC networking, KMS encryption, CloudWatch/CloudTrail, and at least 3 of: HealthLake, Bedrock, Lambda, Step Functions, ECS/Fargate, S3, Clean Rooms. Must be comfortable designing multi-account AWS architectures with security boundaries.

• Infrastructure-as-Code (Expert): Production experience with Terraform or AWS CDK. Must have built and maintained IaC for regulated environments - drift detection, state management, module composition, and policy-as-code (OPA/Sentinel or equivalent).
• CI/CD & Deployment (Expert): End-to-end pipeline design (GitHub Actions, CodePipeline, or equivalent). Blue/green and canary deployment patterns. Container orchestration (ECS Fargate preferred). Artifact management and promotion workflows across environments.
• Observability & Monitoring (Strong): Production experience building observability stacks - structured logging (CloudWatch Logs Insights or ELK), distributed tracing (X-Ray or OpenTelemetry), custom metrics and dashboards, PagerDuty/Opsgenie integration. Must understand healthcare-specific audit logging requirements.
• Security & Compliance (Strong): HIPAA technical safeguard implementation experience. Encryption key management (KMS), secrets management (Secrets Manager/SSM Parameter Store), network segmentation, and WAF/Shield configuration. Familiarity with HITRUST or SOC 2 control frameworks is a plus.
• Agent/AI Operations (Developing to Strong): Experience deploying and monitoring LLM-based systems in production. Understanding of prompt versioning, model endpoint management, token budget monitoring, and inference cost optimization. Experience with Bedrock specifically is preferred but not required - equivalent experience with other LLM deployment platforms (Azure OpenAI, Vertex AI, SageMaker) is acceptable.

Required Experience

• 5+ years in DevOps, SRE, or platform engineering roles with at least 2 years at a staff or senior level
• Production infrastructure experience in healthcare, fintech, or another regulated industry with formal compliance requirements
• Experience working in blended team models (internal + outsourced) - must be comfortable establishing standards that external teams follow
• Demonstrated ability to work autonomously in early-stage environments where you are defining process, not inheriting it, * AWS certifications (Solutions Architect Professional, DevOps Engineer Professional, or Security Specialty)
• Experience with FHIR server infrastructure (HealthLake, HAPI FHIR, or Smile CDR)
• Familiarity with Bedrock AgentCore, agent orchestration patterns, or multi-agent system deployment
• Experience with cost optimization for AI/ML workloads (inference endpoint sizing, spot instances, reserved capacity)

Physical Requirements:

• Proficient in using a computer and related equipment, including printers and fax machines.
• Ability to sit or stand for extended periods.
• Effective communication skills via telephone and email.
• Capable of lifting up to 40 pounds as needed.

Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Life insurance
• Cell phone reimbursement, * Health care insurance (medical, dental, vision)
• Life Insurance
• Supplemental Insurance
• PTO
• 401K matching
• Sick leave
• Phone/internet reimbursement
• Remote work
• Top of the line machines