Senior Software Engineer (DevOps)

About The Role We're a health-benefits platform that moves member money and handles protected health data across a multi-account AWS estate that grew faster than its infrastructure. We're hiring a Senior DevOps Engineer to give it a real platform and own it end to end - how code ships, how secrets are managed, how we know when things break. This is a build-and-harden role with high autonomy: you'll set the standards, not inherit them, and the work is felt across the whole engineering org. What You'll Do Consolidate deployments onto a single CI/CD pipeline (Bitbucket Pipelines + OIDC) with gated promotion sandbox ? staging ? production, and hard gates on services that move money. Build and own a secrets-and-key-management program (AWS Secrets Manager + KMS) with automated, tested rotation. Design least-privilege IAM across a multi-account AWS org, including break-glass and read-only investigative access. Stand up observability and on-call -- alarms, dashboards, and SLOs -- for the payment and PHI paths that can't fail quietly. Codify every environment in Terraform (remote state + locking) and eliminate configuration drift. Harden production services: idempotency, dead-letter queues, kill switches, VPC/PrivateLink egress, and partner-certificate lifecycle. Drive time-boxed migrations, including moving a live member-messaging channel off AWS Pinpoint before end-of-life, and support the ongoing monolith-to-services transition. Provide cost visibility and optimization across accounts.