About

NeedStreet builds the ContinuousCare cloud platform that healthcare organisations use to deliver care online. Healthcare businesses run their own branded patient experience on our multi-tenant B2B SaaS platform. The services we run are critical to patient care, so we treat security, privacy and reliability as core product features.

Role Overview

We are looking for a Senior AWS DevOps Engineer to own the reliability, security, and delivery of our B2B SaaS platform on AWS. You will be responsible for cloud infrastructure, infrastructure as code, CI/CD, container platforms, observability, and security compliance, and you will work closely with application engineering teams.

Responsibilities

Cloud Infrastructure (AWS)

•     Operate and secure production infrastructure across EC2, VPC, ALB, WAF, RDS, ElastiCache, S3, ECR, IAM, CloudWatch, CloudTrail, Athena, and Secrets Manager / SSM.

•     Manage networking, edge routing, web application firewall rules, and TLS/certificate lifecycle.

•     Carry out capacity planning, performance tuning, and cost optimisation.

•     Own backup, restore, and disaster recovery procedures and testing.

Infrastructure as Code

•     Design and maintain Terraform modules, state, and environment configuration.

•     Run infrastructure changes through code review and CI, and handle configuration drift.

Kubernetes & Containers

•     Design, provision, and operate Kubernetes (EKS) clusters and workloads.

•     Build and maintain secure, efficient container images and runtime configurations.

CI/CD

•     Own build, test, and release pipelines (GitHub Actions), including artifact versioning, environment promotion, approvals, and rollback.

•     Integrate security scanning (images, dependencies, secrets, IaC) into delivery pipelines.

Platform Services

•     Operate and tune Redis, RabbitMQ, MySQL, Keycloak (OIDC/OAuth2), and Apache/nginx reverse proxies.

•     Support the deployment and runtime operation of Java (Spring Boot / Spring Cloud) and Node.js services.

Security & Compliance

•     Apply least-privilege access, secrets management, encryption, network segmentation, and system hardening.

•     Support compliance programmes (e.g., SOC 2, HIPAA, ISO 27001, GDPR) through audit evidence, access reviews, logging and retention, change management, and vulnerability management.

•     Lead incident response and post-incident reviews.

Observability

•     Maintain metrics, logging, and alerting with Prometheus/Grafana, Loki, CloudWatch, and OpenSearch/Kibana.

•     Write and maintain runbooks and operational documentation.

Automation & AI

•     Automate operational tasks with Bash, Python, and/or PowerShell and the AWS CLI/SDKs.

•     Use AI-assisted tools responsibly, in line with data protection and security policies.

Collaboration

•     Act as a technical point of reference on infrastructure and delivery practices, and mentor other engineers.

Required Qualifications

Candidates must have hands-on production experience in each of the areas below.

•     6+ years in DevOps, SRE, or cloud infrastructure engineering, including 4+ years running production workloads on AWS.

•     Terraform at production scale: module design, remote state across multiple environments, CI-driven plan/apply, and drift and state management.

•     Kubernetes in production, preferably EKS: cluster provisioning with Terraform, Helm/Kustomize, ingress, autoscaling, RBAC, network policies, upgrades, and troubleshooting.

•     Ownership of CI/CD pipelines (GitHub Actions preferred).

•     Deep Docker expertise, including multi-stage builds and image hardening.

•     Production operation of Redis, RabbitMQ, and MySQL.

•     Apache and nginx as reverse proxies.

•     Operating JVM (Spring Boot / Spring Cloud) and Node.js services in production.

•     Keycloak or a comparable OIDC/OAuth2 identity platform, from an operations perspective.

•     Prometheus/Grafana, Loki, and OpenSearch/Kibana.

•     Security-first engineering: IAM design, secrets management, encryption, audit logging, and vulnerability management.

•     Experience supporting compliance audits (SOC 2, HIPAA, ISO 27001, or similar), ideally in healthcare or another regulated-industry SaaS.

•     Strong scripting in Bash plus Python or PowerShell.

•     Experience using AI-assisted engineering tools with appropriate security controls.

•     Clear written and verbal communication.