CollectiveHealth, Inc.

Compensation

Full Description

About the position Responsibilities • Cloud Infrastructure Management: Design, deploy, and manage scalable, secure, and highly available infrastructure on multi-cloud platforms - AWS and GCP. • Implement and manage Infrastructure as Code (IaC) using tools like Terraform, Ansible to automate provisioning and configuration. • Manage containerized applications and orchestration platforms, primarily Kubernetes and Docker. • Cloud Networking Engineering: Lead the architecture, implementation, and maintenance of secure cloud connectivity solutions to ensure compliant and high-throughput data exchange with external healthcare partners. • Design, implement, and maintain highly available and secure cloud network topologies (e.g., VPCs, subnets, routing tables, and peering) across multiple regions and multiple cloud technologies. • Expertly configure and manage cloud load balancing (e.g., ALB, NLB, GCLB) and DNS services (e.g., Route 53, Cloud DNS) for optimal traffic distribution and low latency. • Own the end-to-end lifecycle of TLS/SSL termination, key rotation, and certificate management across all load balancers to enforce stringent security postures. • Design and enforce network segmentation and Zero Trust Architecture principles at the network layer to secure Protected Health Information (PHI). • Perform network performance analysis and troubleshooting for latency, throughput, and connectivity issues, specifically within the cloud provider's network infrastructure. • Site Reliability & Automation: Develop and implement Service Level Objectives (SLOs) and Service Level Indicators (SLIs) to maintain and improve system reliability. • Automate manual operational tasks, from deployments and scaling to incident response and recovery. • Conduct blameless post-mortems and root cause analyses to prevent recurrence of incidents. • Participate in an on-call rotation to respond to production issues and drive them to resolution. • Monitoring & Application Support: Build and maintain robust monitoring, logging, and alerting systems using tools like Prometheus, Grafana, or the ELK stack. • Work closely with software development teams to improve the reliability and performance of applications. • Manage CI/CD pipelines to ensure safe, automated, and efficient software releases. • Ensure all systems and processes are compliant with healthcare regulations and security best practices (HIPAA, SOC 2). Requirements • Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience. • 8+ years of experience in a Network Engineering or Cloud Engineering role. • Strong proficiency with AWS and GCP cloud providers. • Deep expertise in network observability tools and designing systems for continuous network compliance auditing against HIPAA / HITRUST standards. • Expert-level proficiency in VPC design, advanced routing protocols, IP Address Management (IPAM), and Container Network Interface (CNI) configuration. • Hands-on experience with containerization and orchestration technologies such as Kubernetes, Docker. • Solid experience with Infrastructure as Code tools such as Terraform, Ansible. • Proficiency in scripting and/or programming languages such as Python, Go, Bash. • Experience in capacity planning, cost analysis, and justification for the architecture and design proposals. • Experience working in a regulated industry (e.g., healthcare, finance) with a strong understanding of security and compliance requirements. Nice-to-haves • Multi-cloud & Multi-site networking experience with AWS and GCP. • Experience with Service Mesh technologies (e.g., Istio, Linkerd) to manage and secure inter-service communication. • Relevant certifications: AWS Certified Advanced Networking or GCP Professional Cloud Network Engineer. Benefits • stock options • health insurance • 401k • paid time off