Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузите резюме
описание
Conduit Dental is a dental interoperability platform that connects the systems used by dental practices, enabling clinical and operational data to move securely and reliably. Its platform handles protected health information and supports regulated healthcare workloads.
задачи
Lead the design and evolution of DevOps and platform architecture;
Own the architecture and operation of the cloud and container platform;
Make and document architecture decisions as ADRs;
Ensure the quality, performance, security, and stability of production systems handling PHI;
Build and evolve CI/CD in GitHub Actions, including supply-chain chain of custody, Trivy gates, SBOM generation, cosign keyless signing and verification, and end-to-end digest pinning;
Own the GitOps promotion and rollback model, including ArgoCD convergence, backup-then-migrate ordering, and one-click rollback;
Lead modernization of existing systems, including the Cloud Run to GKE/GitOps cutover and decommissioning of legacy infrastructure;
Keep the platform aligned with HIPAA and SOC 2 requirements, working alongside compliance tooling;
Design deploy gates that fail loudly when blocked;
Write runbooks so the platform can be operated by someone other than its author;
Mentor DevOps engineers and the wider engineering team, and contribute to technical planning and hiring.
требования
10+ Years in DevOps, Cloud, or Platform Engineering;
Proven experience owning a production platform, not only contributing to one;
Experience delivering in regulated or high-assurance environments;
Degree in computer science, electrical engineering, mathematics, physics, or equivalent experience;
Fluent English, spoken and written (C1 minimum);
Able to work regular overlap hours with US Eastern Time (early afternoon to evening in Berlin);
Strong GCP experience, or deep AWS/Azure experience with a track record of gaining expertise in a new cloud;
Production Kubernetes experience, ideally GKE, including Workload Identity, private clusters, autoscaling node pools, release channels, PodDisruptionBudgets, namespace and RBAC design;
Practical ArgoCD and GitOps experience, including app-of-apps, AppProjects, sync waves, PreSync hooks, and drift detection;
Terraform experience with modules, workspaces, remote state, state migrations, tflint, and cost awareness;
Helm chart authoring experience with environment-scoped values and encrypted secrets (SOPS + Cloud KMS);
GitHub Actions experience with reusable and composite workflows, OIDC / Workload Identity Federation, SHA-pinned actions, and branch rulesets;
Supply-chain security experience with Trivy / OSV, SBOM (SPDX), Sigstore / cosign, gitleaks, pre-commit, and CodeQL;
Experience with microservices and API-based architectures;
Experience with ingress and connectivity tools, including Traefik, external-dns, cert-manager, VPC/NAT, private service access, and Tailscale;
Observability experience with Prometheus / Grafana, Cloud Monitoring, and actionable alerting;
Database deployment experience with Cloud SQL Postgres, expand/contract migrations, and backup-gated releases;
Nice to have: Healthcare and dental experience, hands-on experience running infrastructure that stores or processes PHI under HIPAA, familiarity with healthcare data standards and integrations (HL7, FHIR, EHR or practice management systems), dental technology experience, experience supporting SOC 2 audits and infrastructure-side evidence collection, CKA and/or CKAD, Google Cloud Professional Cloud DevOps Engineer, HashiCorp Terraform Associate, AWS DevOps Engineer Professional, Microsoft DevOps Engineer Expert.
условия
Highly competitive compensation and benefits package;
Flexible hours, with a shared daily overlap window across Berlin and US Eastern Time;
Funded certifications (CKA/CKAD, GCP, Terraform), plus conference and training budget.
.svg)
