Senior Platform Engineer

Overview

Help us build and operate the AWS and Azure platforms behind HealthEdge’s healthcare payer products, a multi account/subscription, multi-region environment. As a Senior Platform Engineer on Cloud Platform Services, you will own infrastructure platform projects from design through production and build the self-service tooling and guardrails that let teams deploy infrastructure at scale across the organization.

• 6+ years of hands-on cloud engineering experience, with deep expertise in AWS or Azure (e.g., EC2/Azure VMs, EKS/ECS/AKS, IAM/Entra ID, VPC/VNet, S3/Blob Storage, RDS/Azure SQL) and working knowledge of the other.
• Strong AWS CDK experience in Python.
• Track record of owning and delivering multi-month infrastructure projects end to end.
• Infrastructure as Code experience with Terraform and/or cloud-native templating (CloudFormation, Bicep/ARM) in addition to CDK.
• Experience building and maintaining CI/CD pipelines (GitHub Actions, Jenkins, or equivalent).
• Solid understanding of IAM design patterns (AWS IAM, Azure Entra ID/RBAC), including cross-account/subscription access and least-privilege enforcement.
• Experience with containerized, cloud-native environments and Kubernetes (EKS and/or AKS).
• Configuration management experience: SaltStack is essential, or Ansible, Chef, or Puppet with a willingness to learn Salt.
• Strong scripting ability: Python required; Bash or PowerShell.
• Security-first mindset, with experience integrating security tooling into development and deployment cycles.
• Excellent troubleshooting and communication skills, including experience resolving escalated (L3) infrastructure incidents; able to explain technical tradeoffs to both technical and non-technical stakeholders.
• Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience.

• Experience building tooling and automation to deploy observability standards (metrics, dashboards, and alerting) using AWS and Azure native monitoring services.
• Experience mentoring or technically leading other engineers.
• Experience operating in regulated environments (FedRAMP, HIPAA, SOC 2) and familiarity with what that means for infrastructure design.
• Experience with FinOps practices and cost governance programs.
• AWS or Azure certifications (e.g., AWS Solutions Architect Associate or Professional, Azure Solutions Architect Expert).
• Healthcare technology or digital health platform experience.
• Comfortable with ambiguity; thrives in a fast-paced, evolving environment.
• Treats every system as production-grade from day one.
• Identifies and raises risk early rather than waiting for it to become an incident.
• Curious and continuously learning; open to feedback.
• Collaborative across teams and functions; strong sense of shared ownership.
• Strives not to repeat the same mistake twice.

Geographic Responsibility: Remote, US

Type of Employment: Full-time, permanent

• Design, build, and maintain AWS and Azure infrastructure platform automation across a multi-account/subscription, multi-region environment supporting multiple product lines.
• Build reusable, versioned, auditable infrastructure modules in IaC, and convert existing Terraform, CloudFormation, and Bicep/ARM templates to the corporate IaC standard.
• Design cross-account/subscription identity and access patterns (e.g., AWS IAM assume-role trust policies, Azure Entra ID and RBAC), least-privilege enforcement, and organization-level policy and tagging governance (e.g., AWS SCPs, Azure Policy).
• Build self-service tooling, templates, and reference patterns that make it easy for product teams to deploy safely on our chosen cloud providers.

• Take projects from proposal through production with minimal direction: scope, plan, break down work, and communicate status and risk.
• Mentor engineers through design reviews, code reviews, and pairing.
• Set and document cloud best practices, guardrails, and reference architectures for use across engineering teams.

• Build and evolve CI/CD pipelines for automated, secure, and reproducible IaC deployments across HealthEdge.
• Develop automation and scripting (Python, Bash) to reduce manual toil and enforce operational standards, including configuration management with SaltStack and Ansible.
• Operationalize solutions from proof-of-concept through production, prioritizing repeatability and maintainability.

• Build and maintain the tooling and automation that deploy and manage the metrics, dashboards, and alerting standards set by the Observability and service teams, using AWS and Azure native monitoring services, while keeping the underlying infrastructure scalable, available, and secure.
• Participate in the Level 3 (L3) escalation on-call rotation, providing expert infrastructure troubleshooting for issues escalated from L1/L2 support and application teams; drive root cause analysis, contribute to incident retrospectives, and turn findings into automation, runbooks, and platform improvements.

• Maintain and strengthen security program controls for HealthEdge's FedRAMP and HIPAA obligations (and SOC 2) by encoding them in IaC modules and policy-as-code, so controls are enforced by default.
• Build automated security checks into CI/CD pipelines and cloud environments.
• Partner with SecOps on identity and access role design, trust and delegation reviews, and audit evidence for compliance assessments.

• Contribute to FinOps initiatives: identify, diagnose, and remediate cost anomalies, and make pragmatic tradeoffs between cost, performance, and utilization.
• Use AI coding assistants (GitHub Copilot, Claude Code, Cursor) to accelerate IaC development, scripting, troubleshooting, and first-pass documentation, and validate output before publishing.
• Evaluate emerging AI-assisted operations patterns for applicability to HealthEdge's platform, balancing velocity gains against compliance and audit requirements.

Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:

• The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus.
• Work across multiple time zones in a hybrid or remote work environment.
• Long periods of time sitting and/or standing in front of a computer using video technology.
• May require travel dependent on company needs.

**The annual US base salary range for this position is $110,000 to $117,000. This salary range may cover multiple career levels at HealthEdge. Final compensation will be determined during the interview process and is based on a combination of factors including, but not limited to, your skills, experience, qualifications and education.