Senior Software Engineer (DevOps)

About The Role

We're a health-benefits platform that moves member money and handles protected health data across a multi-account AWS estate that grew faster than its infrastructure. We're hiring a Senior DevOps Engineer to give it a real platform and own it end to end - how code ships, how secrets are managed, how we know when things break. This is a build-and-harden role with high autonomy: you'll set the standards, not inherit them, and the work is felt across the whole engineering org.

What You'll Do

• Consolidate deployments onto a single CI/CD pipeline (Bitbucket Pipelines + OIDC) with gated promotion sandbox ? staging ? production, and hard gates on services that move money.
• Build and own a secrets-and-key-management program (AWS Secrets Manager + KMS) with automated, tested rotation.
• Design least-privilege IAM across a multi-account AWS org, including break-glass and read-only investigative access.
• Stand up observability and on-call -- alarms, dashboards, and SLOs -- for the payment and PHI paths that can't fail quietly.
• Codify every environment in Terraform (remote state + locking) and eliminate configuration drift.
• Harden production services: idempotency, dead-letter queues, kill switches, VPC/PrivateLink egress, and partner-certificate lifecycle.
• Drive time-boxed migrations, including moving a live member-messaging channel off AWS Pinpoint before end-of-life, and support the ongoing monolith-to-services transition.
• Provide cost visibility and optimization across accounts.

What You Bring

• 6+ years in DevOps / SRE, with 4+ years deep on AWS running production workloads.
• Fluent in Terraform; you treat infrastructure as reviewed, tested code.
• Strong IAM: cross-account roles, OIDC federation, least-privilege design.
• End-to-end CI/CD ownership (Bitbucket Pipelines, GitHub Actions, or GitLab CI).
• Secrets/KMS and secure networking (VPC, PrivateLink, NAT, security groups).
• You instrument what you ship and carry a pager for it.
• Confident scripting in Node.js and/or Python.
• Comfortable operating in a regulated environment (HIPAA, SOC 2, or PCI).

Nice To Have

• MongoDB Atlas operations · Step Functions / EventBridge event design
• Payments or healthcare integrations (Stripe, WEX/EDI, NetSuite)
• Track record migrating a monolith to services with safe cutovers
• FinOps / multi-account cost governance
• AWS certifications (Solutions Architect Pro, DevOps Pro, or Security)

Compensation

The base salary range for this role is $140,000 - $190,000 depending on experience. 

Who We Are

Our main offering is a MERP that, when paired with a HDHP, offers first dollar coverage to employees at a lower premium cost. This means people have access to early care without the worry of a copay, coinsurance, or deductible. Ultimately, early care drives down overall cost and improves health and happiness. We think this is the way healthcare should work! Our primary sales channel is selling into brokers. We have a national presence with a growing book of business and expanded product offerings.

Our team at Nonstop is where our magic really comes to life. We are driven, curious, collaborative, passionate, mission oriented, and most of all - we are real people who love what we do and believe in the real impact we are driving for people all over the US.