DevOps Engineer

Job Description

Skilled Wound Care is seeking a hands‑on Dev Ops Engineer to take ownership of the deployment, operation, and security of our healthcare software platforms — including our Electronic Health Record (EHR) system and our end‑to‑end Revenue Cycle Management (RCM) and billing platform. In this role, you will be the primary owner of how our applications are built, shipped, run, monitored, and secured in production.

This is the first dedicated Dev Ops role at our company, and it is being created to formalize and grow this function as we scale. You will own the full scope of our application infrastructure on a day‑to‑day basis, with our Lead Software Developers serving as backup support for production emergencies and after‑hours coverage. This position is focused exclusively on our software product infrastructure — the servers, cloud resources, containers, pipelines, and tooling that support our applications.

You will not be responsible for general corporate IT systems such as file shares, remote desktop servers, internal VPNs, or end‑user device management.

Because our platforms handle Protected Health Information (PHI), security and compliance are not afterthoughts — they are core to the role. You will work closely with our development team to ensure that everything we ship is reliable, performant, and compliant with HIPAA and our broader security program.

On‑Call:
This role includes participation in a primary on‑call rotation for production incidents affecting our healthcare platforms, with the Lead Software Developers serving as secondary/backup coverage. We aim to keep on‑call burden reasonable through strong monitoring, automation, and clearly documented runbooks.

• Own the deployment, configuration, and lifecycle management of our application servers and cloud infrastructure across development, staging, and production environments.
• Provision and manage AWS resources (EC2, VPC, RDS, S3, IAM, Route 53, ELB/ALB, Cloud Front, ACM, etc.) to support our application stack; secondary GCP exposure is a plus.
• Build, maintain, and harden Docker images and container deployments for our applications.
• Use Infrastructure as Code (Terraform preferred) to define and version‑control cloud resources where practical, and progressively reduce manual configuration over time.
• Maintain Linux servers — install, patch, harden, and tune them for performance, reliability, and security.
• Coordinate with the development team to manage updates to application runtimes, frameworks, and system‑level dependencies (e.g., PHP, Node.js, Python, Nginx/Apache, MySQL, OS packages).
• Build and maintain CI/CD pipelines (e.g., Git Hub Actions, Git Lab CI, Jenkins, or Circle
  
  CI) for automated build, test, and deployment of our applications.
• Implement safe, repeatable release processes including environment promotion, automated test gates, and reliable rollback procedures.
• Provide tooling and documentation that helps developers ship faster while staying within secure, compliant guardrails.
• Implement and maintain monitoring, alerting, and observability tooling (e.g., Cloud Watch, Datadog, New Relic, Prometheus/Grafana) across our application stack.
• Set up centralized logging and audit trails appropriate for a HIPAA‑regulated environment.
• Participate in a primary on‑call rotation for production incidents, with the Lead Software Developers providing secondary/backup coverage.
• Investigate and resolve production issues, communicate clearly with stakeholders during incidents, and run post‑mortems with concrete follow‑up actions.
• Track uptime and reliability targets; proactively identify reliability and capacity risks before they become outages.
• Maintain and improve the security posture of our application infrastructure: AWS security groups and network ACLs, IAM/role‑based access, encryption in transit and at rest, secrets management (e.g., AWS Secrets Manager, Parameter Store, or Hashi Corp Vault), and audit logging.
• Implement and maintain controls aligned with HIPAA Security Rule requirements, including access controls, audit trails, integrity controls, transmission security, and backup/disaster recovery.
• Run vulnerability scanning…