DevOps Engineer, Doximity

• Extensive AWS knowledge and experience
• Solid understanding of Kubernetes and Helm
• Experience with configuration and resource management tools such as Terraform and Ansible
• Experience with CI and CD using tools such as Github Actions, Atlantis, CircleCI
• Proactively identify areas for improvement and produce action plans
• Participate in a 1-week on and 4 weeks off, business hours on-call rotation

Desirable

• Join our mission to help every physician be more productive and provide better care for their patients
• San Francisco, CA or Remote (North America and South America)
• Doximity is transforming the healthcare industry. Join our mission to help every physician be more productive and provide better care for their patients. As medicine's largest network in the United States, there's an elevated level of responsibility in everything we do. We don't take that responsibility lightly and are committed to building diverse teams with an inclusive culture that can make a direct impact on the healthcare system
• One of Doximity's core values is stretching ourselves. Even if you don't check off all the boxes below we encourage you to apply. Doximity is full of exceptional people that don't fit a mold, join us!
• We are looking for an experienced DevOps engineer to join our Infrastructure Security team. You will contribute and own Security efforts for our entire application and infrastructure stack as well as support and build products alongside our 300+ person engineering team used by millions of medical professionals
• Develop, schedule, and execute automated security audits on infrastructure using industry-standard security frameworks like the CIS Benchmark
• Implement a strong security posture in our Kubernetes ecosystem that includes Terraform, Helm, and Ansible
• Manage over 50 AWS accounts including IAM permissions, VPC and networking, firewall (WAF), and edge protection
• Actively participate in the design, implementation, and maintenance of the development, staging, and production infrastructure and application security
• Analyze traffic using tooling and metrics to protect against malicious bots, scrapers, and attackers, while also monitoring CVEs and implementing hotfixes
• Lead security and policy related audits such as SOC2 Type II
• Help maintain our private security bug bounty program hosted on Hackerone: this involves engaging security researchers, validating security finds, determining impact/risk, awarding bounties, and fixing or coordinating remediation efforts
• Work with key stakeholders to document existing security policies and create new ones
• Actively participate in the Security Incident Response (SIR) process to triage security issues and communicate the resolution through post-mortems
• Continuously evaluate and implement security observability tooling, both in the Kubernetes ecosystem and all supporting infrastructure
• Periodically audit and rotate access credentials