DevOps Engineer

We are the Los Angeles Network for Enhanced Services (LANES), a community-based Qualified Health Information Organization dedicated to improving healthcare delivery through secure, cost-effective electronic exchange of patient medical records among public and private healthcare providers and health plans in Los Angeles County. Our team includes diverse healthcare IT experts focused on consumer health, engagement, technology, and innovation. We work with modern tools and standards including Mirth technology, AWS cloud infrastructure, Google BigQuery, and FHIR. This is a full-time, exempt hybrid remote role based in Los Angeles, with occasional in-person meetings in the Los Angeles area. We offer a salary range of $135,000 to $165,000, along with comprehensive health, dental, and vision insurance, 401(k) matching, and paid time off.

- We require a bachelors degree in Computer Science, Information Technology, Cyber Security, or a closely related discipline, or equivalent hands-on experience.
- We need 5+ years of production experience administering AWS environments, including EC2, VPC, Auto Scaling, Route 53, RDS, and IAM; GCP experience is highly desirable.
- We value direct exposure to HITRUST, SOC 2, or HIPAA compliance audits, along with a solid understanding of healthcare privacy regulations.
- We expect practical experience implementing and operating Datadog or similar observability platforms such as New Relic or Splunk.
- We need demonstrated ability to design, maintain, and troubleshoot VPN tunnels, firewalls, and secure network routing.
- We require 3+ years working with healthcare data standards and interface engines, including HL7 v2/v3, CCD/C-CDA, FHIR, and preferably Mirth Connect.
- We expect proficiency in Linux shell scripting, experience managing Postgres databases, and familiarity supporting Node.js and Angular applications.
- We look for experience building and refining automated CI/CD deployment pipelines.
- A masters degree in a technical or healthcare informatics field is preferred.
- Relevant certifications such as AWS Certified DevOps Engineer, AWS Certified Security – Specialty, or CCSFP are preferred.
- Strong technical writing skills and the ability to translate complex audit or system issues into clear management updates are preferred.
- Excellent interpersonal and communication skills for working with remote teams and healthcare clients are preferred.

- We manage, scale, and troubleshoot our multi-cloud environment, primarily AWS with some GCP workloads, to maximize uptime and resilience.
- We design, secure, and deploy cloud infrastructure in AWS using tools and services such as Node.js, EC2, Lambda, S3, Postgres, ALB, Auto Scaling Groups, and Redis.
- We implement and operate Datadog across the stack to provide deep observability, application performance monitoring, log oversight, and proactive alerting.
- We perform system updates, patching, and infrastructure maintenance during scheduled monthly windows with minimal disruption.
- We serve as the technical lead for HITRUST certification and compliance audits, ensuring controls, logging, and access management meet healthcare security standards.
- We architect, configure, and maintain secure site-to-site VPN connections for external hospital systems, clinics, and partner organizations.
- We enforce data security practices, including encryption at rest and in transit, to protect sensitive healthcare information.
- We oversee identity and access management, network firewalls, and vulnerability remediation.
- We troubleshoot and optimize HL7, CCD, and FHIR interfaces handled through Mirth Connect.
- We monitor Postgres performance, apply optimization tactics, and maintain backup and disaster recovery testing procedures.
- We provide Tier 2/3 engineering support to resolve issues across the middleware and web layers, including Node.js, load-balanced EC2 Auto Scaling Groups, Angular, and Nginx.
- We define, maintain, and automate CI/CD pipelines to support smooth code deployments.
- We create and update standard operating procedures, runbooks, and architectural diagrams.
- We collaborate with external vendors, clients, and internal engineering teams to resolve complex integration tickets.