Staff DevOps Engineer (Platform)

About 1upHealth

At 1upHealth, we’re on a mission to unlock health data and empower the future of healthcare through modern, cloud-native data infrastructure and interoperability. We build a platform that enables payers, providers, and digital health companies to ingest, normalize, and exchange clinical and claims data at scale; securely, reliably, and with strong compliance foundations. We are a remote-first U.S. company with a culture focused on collaboration, transparency, and meaningful impact.

About the role

We are seeking a Staff DevOps Engineer to build and run the CI/CD pipelines, automation and test infrastructure that let our engineers ship safely and often.

You’ll join a central platform team supporting the entire Product & Engineering organization. The team provides engineering teams with the testing frameworks, pipelines, and infrastructure they rely on daily, partners with Product and other stakeholders on cross-team initiatives, and continuously improves the platform through its own roadmap. You’ll help shape and deliver improvements across testing, infrastructure, and developer experience to make the platform more reliable and easier to build on.

What you'll do

• Work across a multi-account AWS environment running Kubernetes, with infrastructure managed through Terraform and Terragrunt and deployments handled through GitOps.

• Work cross-functionally across all engineering teams to understand their delivery and testing needs to turn shared pain points into platform improvements.

• Partner with developers to build and maintain shared test frameworks and fixtures, including synthetic test data that contains no real PHI.

• Collaborate with Product and Engineering leadership to plan, prioritize and deliver initiatives across the Product & Engineering organization.

• Build automated quality gates into CI/CD: integration, contract and end-to-end tests run on every change, with clear pass/fail signals.

• Automate operational toil with scripts, runbooks and internal tools.

• Test infrastructure as code with tools such as Terratest, terraform validate/plan checks, policy-as-code (OPA, Checkov, tfsec) and Helm chart tests.

• Create ephemeral test environments so engineers can validate changes against production-like infrastructure before merging.

• Design, build and maintain AWS infrastructure across many accounts (EKS, EC2, VPC, IAM, S3, Route 53, Transit Gateway) using Terraform and Terragrunt.

• Add post-deploy validation: smoke tests, synthetic monitors and automated rollback when health checks fail.

• Create and grow new and existing integration and end-to-end test suites to eliminate gaps in coverage.

• Run performance, load and resilience testing (including failure injection) on critical services and data pipelines.

• Track test reliability and pipeline speed; find and fix flaky tests and slow stages.

• Run and improve our Kubernetes platform, including Helm charts, ArgoCD-based GitOps delivery, autoscaling and cluster upgrades.

• Build and maintain CI/CD pipelines that take code from commit to production with minimal manual steps.

• Own observability: metrics, logs, traces, dashboards and alerting in Datadog, with SLOs for the services you support.

• Take part in an on-call rotation, lead incident response, and write blameless postmortems that lead to long term fixes.

• Keep the platform secure and HIPAA-compliant: least-privilege IAM, encryption, audit logging, and remediating findings from cloud security tooling.

Relevant Experience

• 8+ years in DevOps, platform, SRE or infrastructure engineering, with production AWS experience.

• Track record of driving cross-team initiatives: building alignment with engineering, product and business stakeholders, and influencing without direct authority.

• Built and maintained CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins or similar) that include automated testing stages.

• Experience writing automated tests, not just running them: at least one test framework such as pytest, Go's testing package, Jest, or Terratest.

• Proficiency in at least one general-purpose language (Python or Go preferred) plus common scripting languages ie. Bash/SH.

• Strong Terraform skills; Terragrunt or another multi-environment pattern is a plus.

• Hands-on Kubernetes experience, including Helm and a GitOps tool such as ArgoCD.

• Working knowledge of observability tools (Datadog, Prometheus/Grafana or similar) and how to alert on what matters.

• Comfort with on-call, incident response, converting incidents into automated prevention.

• Clear written communication: design docs, runbooks and postmortems others can act on.

Nice to have

• Experience in healthcare or another regulated industry (HIPAA, SOC 2, HITRUST).

• Background in SDET or QA automation role.

• Familiarity with FHIR R4 or other healthcare data standards.

• Policy-as-code and compliance automation (OPA/Gatekeeper, AWS Config rules).

• Contract testing (Pact) or API testing tools.

• Load and chaos testing tools such as k6, Locust, Gatling, AWS Fault Injection Service or LitmusChaos.

• Experience testing data pipelines or streaming systems (Kafka or compatible platforms).

Don't meet every requirement? Studies have shown that women, communities of color and historically underrepresented talent are less likely to apply to jobs unless they meet every single qualification. At 1upHealth we are dedicated to building a diverse, inclusive and authentic workplace. We encourage folks to apply if they meet at least 50% of the qualifications above.

Benefits

100% Paid BCBS Medical and Dental Insurance for Employees

Vision Insurance

Flexible PTO

Equity for All Employees

401(k)

Home Office Stipend

Lifestyle Spending Account

Parental Leave (6 weeks bonding leave for all new parents + 10 weeks for birthing parents)

Security Alert: 1upHealth only uses email domains of First Name. Last Name@1up.health or no-reply@1up.health to communicate with prospects. You will never receive an email from a third-party email service such as gmail. In addition, we will never ask a candidate for employment to share personal information (such as banking information, social security numbers, passport, etc), purchase their own equipment, or pay to apply to an open position.