Senior DevOps Engineer

We’re Scan.com http://Scan.com, the digital health scale-up making diagnostics accessible, fast, and transparent. Our technology speeds up diagnoses for timely treatments, improving healthcare outcomes for hundreds of patients each day. We're doing diagnostics differently, with solutions tailored to both patients and providers, all backed by our technology and world-class customer operations team. Our B2C marketplace simplifies booking a scan, making it as straightforward for patients as booking a hotel. Our B2B platforms provide live scheduling at the point of care and harness AI to ease workflows for physicians, attorneys, and providers. WHAT YOU WILL BE GETTING INVOLVED IN Scan.com http://Scan.com's infrastructure is the layer everything else depends on. Our marketplace, integrations, data warehouse, and clinical workflows all sit on top of a cloud environment that has to be reliable, observable, secure, and compliant with the frameworks that govern healthcare technology. As we scale, that layer needs to scale with us, and the engineering practices around it need to mature at the same pace. We are seeking an experienced DevOps Engineer to join our Infrastructure team as we expand the DevOps function. This is a hands-on senior role that combines deep technical execution with the kind of engineering judgment that shapes how a growing infrastructure team operates. You will report into our Infrastructure leadership and work closely with Engineering, Security, and Compliance across a HIPAA-regulated environment. As a scale-up business, you can expect your role to develop over time. Here are some of the types of things you could be getting involved in: - Provide hands-on DevOps work across the network, servers, and cloud platforms, operating as a senior technical contributor from day one - Ensure DevOps and Engineering processes align with security best practices, and help embed those practices deeper into how the broader engineering org works - Implement monitoring, logging, and observability solutions using CloudWatch, DataDog, and other tooling to ensure system health and performance are visible and actionable - Automate security scanning, vulnerability assessments, and compliance checks within CI/CD pipelines, closing the gap between "we run scans" and "we act on what they find" - Ensure all infrastructure is managed via IaC (Terraform), so that reproducibility and version control are properties of the system rather than aspirations - Architect and implement deployment strategies, including blue-green deployments, canary releases, and automated rollbacks, with the goal of making production changes safe by default - Advance software supply chain security across dependency risk, artifact integrity, and code signing, and guide implementation patterns that other engineering teams can adopt - Leverage AI-powered tools to analyze risks, identify consolidation opportunities across our estate, and generate assessment summaries that would otherwise require significant manual effort THE TOP 5 THINGS WE WANT TO SEE IN YOUR FIRST YEAR - Deep infrastructure command. In your first 90 days, we would expect you to build a comprehensive understanding of our cloud environment: the services we run, how they are configured, where the risk concentrations are, and where the highest-leverage improvements sit. You are the person the team looks to for confident answers about how our infrastructure actually works. - IaC coverage and reliability. By the end of your first year, our Terraform footprint has meaningfully expanded, drift has been reduced, and the infrastructure that matters most is managed in code without exceptions. New environments and services are provisioned reproducibly rather than by hand. - A stronger security and compliance posture. You have materially contributed to how we implement HIPAA, SOC 2, and ISO controls in our cloud environment. Compliance is not a periodic scramble but a set of automated checks and repeatable patterns t…