DevOps Engineer

Role type & Location

- Full time Remote (Work from home) based either Dublin or UK only

- Occasional Travel to Dublin office if Ireland based (Glasnevin) or UK (Oxford) if UK based

Visa

- We regret we cannot offer Irish or UK visa sponsorship for this role

- Every laboratory and customer site we work with depends on a secure, reliable connection into our platform.

- You will own that connectivity: the AWS infrastructure that links our products to laboratory and customer systems, and the secure network paths our research teams use to reach their compute. It supports a regulated clinical environment, so it must be secure, observable and recoverable

- You will report to the Principal Engineer - Cybersecurity & DevOps and join a lean team in which each engineer owns a defined area, with no large support structure.

What This Is NOT

- Not an IT, helpdesk or end-user support role.

- Not an infrastructure ticket-queue role.

- Not a product CI/CD ownership role. The DevOps team owns it, and you contribute as part of that team.

- Not a role with hand-built servers. If it cannot be rebuilt from code, it is not finished.

- Our Digital Trust & Transformation Office (DTO) brings together the teams that keep Deciphex trustworthy and moving forward: information security, cybersecurity, application security, DevOps, IT, data protection and privacy, AI and AI governance, and operational resilience.

- We work to one aim: our customers, clinicians and patients can trust our systems and the data in them, and our engineers can ship safely and quickly.

Our Technology stack

- AWS, GCP, Terraform, Helm, Docker, Mirth, Linux/Win/cloud networking/firewalling etc.

What You help us with

- You work as part of a lean DevOps team

- Lab Systems engineers own on-premises laboratory applications and you own the connectivity to them. Research and data science teams own their platforms and you own the secure network access to them. Cybersecurity and Data Security engineers set the security standards you implement.

- This is a senior, hands-on role with real ownership.

- You will set technical direction, make the design decisions, and be the person others rely on when it breaks.

This includes;

- Run and scale our customer connectivity services on EKS, with monitoring, firewall rules and certificates.

- Provide, as code (Terraform and Helm), the connectivity, network policy and secrets that teams need to connect new customers and laboratories. We do not use click-ops.

- Operate and upgrade our cloud-hosted integration and laboratory platform services with high availability and backup.

- Run disaster-recovery exercises and keep the evidence.

- Own secure network access to our GPU and research compute across cloud providers. The research platform and ML tooling stay with the research teams.

- Shape the shared network and connectivity layer of our AWS multi-account platform (landing zone), as part of the DevOps team.

- Build the monitoring, flow-log analysis and alerting that finds faults before a laboratory or customer does.

- Patch and harden the cluster, nodes and images, following the security team's standards.

- Document the estate as code, join the on-call rota (planned changes happen outside laboratory hours), and mentor colleagues.

• The cloud connectivity a new customer, internal team or laboratory needs is provided as code, through a predictable process, and documented.
• Faults are found by monitoring before laboratory staff or customers report them.
• Recovery is tested regularly, with evidence.

• You will typically have 5/6++ years in DevOps, SRE or infrastructure engineering.
• We care more about what you have owned and debugged in production than your job title.
• Deep Linux/Win networking: iptables / nftables, routing, DNS and TLS. You can reason about a rule set line by line.
• Site-to-site VPN and private connectivity (IPsec, WireGuard or OpenVPN), and tracing a failing flow with flow logs and packet capture.
• Kubernetes in production, ideally Amazon EKS: Helm, hardened Docker images, and debugging with kubectl.
• Infrastructure as code in production, ideally Terraform (or OpenTofu), including injecting secrets as code. We use Terraform, and you will write it from week one.
• AWS administration at the level of trust to change VPCs, endpoints, RDS and IAM safely.
• Disciplined production change: peer review, monitoring, runbooks and tested recovery.
• Knowledge and experience with both Windows and Linux networking, CI/CD, secrets management and SSO or federation.
• Experience with cloud-based healthcare integration (for example HL7 or FHIR), laboratory connectivity to cloud, GPU or research cloud environments, or a regulated environment helps but is not required.

• 💰 Salary with performance-based annual increases to recognise your contribution.
• 🩺 Healthcare benefits to support your wellbeing.
• 🌴 Annual leave plus additional Christmas leave to rest and recharge.
• 🔬 Meaningful work that helps improve patient outcomes.
• 🚀 A growing company where you can make your mark.
• 💡 Varied, challenging projects to keep you learning.
• 📈 Regular feedback and career opportunities to help you progress.
• 🤝 A supportive, multicultural team to share ideas and learn from.

Through the work that we do, the team at Deciphex helps pharma to accelerate the process of essential drug development and helps cancer patients get a timely and accurate diagnosis.

Founded in Dublin (Ireland) in 2017, Deciphex has scaled rapidly to a team of over 230 people and counting who are providing software solutions to address the pathology gap in research pathology and clinical areas. We have offices in Dublin, Exeter, Oxford, Chicago and Toronto, and are expanding our team throughout the world.

We are software developers, clinical specialists, artificial intelligence engineers, operations professionals and so much more, all working as one team to support our customers and patients.

Read more about Deciphex here and more about our team on our Careers Page here.

Deciphex is an equal opportunities employer and we are committed to the principle of equality. All qualified applicants will be considered for employment without regard to age, race, religious beliefs, political views, gender identity, affectional or sexual orientation, national origin, family or marital status (including pregnancy), disability, membership of the travelling community or any other classification protected by applicable law.

A copy of our Privacy Policy can be viewed here.