Director of Cloud Infrastructure & Security (Hands-On)

Ceiba Healthcare•New York, NY

6d•Remote

About The Position

Ceiba Healthcare is an AI-powered virtual care platform transforming how hospitals deliver care remotely. Our platform connects clinicians, medical devices, and patients in real-time—enabling Tele-ICU, Telemetry, and Tele-Neurology across a global network. We operate at the intersection of real-time clinical data, cloud infrastructure at scale, and AI-driven healthcare workflows. We are seeking a hands-on Director to own and operate Ceiba's AWS environment and hospital connectivity layer. This is a player-coach role that demands technical grit: while you will define architectural strategy and lead a team, we are specifically looking for a leader who has personally configured AWS Site-to-Site VPNs and is comfortable troubleshooting complex connectivity directly with external enterprise/hospital IT departments. This is not a pure management position; you must be a "builder" who remains highly active in the console and tactical execution.

Requirements

10+ years in Cloud Infrastructure/DevOps/SRE with 3+ years in a leadership capacity (Director, Lead, or Principal).
Deep, hands-on mastery of AWS core services (VPC, IAM, EC2, RDS, EKS) and the ability to personally configure and troubleshoot infrastructure.
Proven experience setting up and troubleshooting Site-to-Site VPNs (IPSec) and working with enterprise-grade firewalls and BGP routing.
Advanced knowledge of Linux Server Administration and scripting (Python, Bash) for automation and compliance reporting.
Direct experience managing infrastructure within HIPAA, SOC 2, or HITRUST frameworks.
You are an architect who still loves to build; you thrive in fast-growing, high-impact environments with real-world constraints and external stakeholders.

Responsibilities

Personally design, configure, and troubleshoot AWS Site-to-Site VPN (IPSec) and Client VPN solutions.
Partner with external hospital IT teams to configure firewall rules (Cisco, Palo Alto, Fortinet) and resolve complex routing conflicts.
Maintain secure routing (BGP/Static) and sub-netting for complex hybrid-cloud environments.
Diagnose and resolve connectivity issues, latency, and packet loss across the connectivity layer.
Lead the full incident response lifecycle, including proactive monitoring (CloudWatch, Prometheus, Grafana) and log analysis to identify bottlenecks.
Diagnose complex issues across cloud, networking, and Linux systems; conduct detailed root cause analysis (RCA) and implement permanent remediations.
Ensure all infrastructure meets HIPAA, SOC 2 Type 2, and HITRUST requirements through strict IAM policies, encryption (KMS, TLS), and audit logging.
Lead technical preparations for security certifications, ensuring all systems, processes, and controls align with regulatory standards.
Architect and maintain VPC architecture, Compute (EKS/ECS, Lambda), and Storage (RDS, S3).
Manage and optimize Linux environments (Ubuntu, RHEL), focusing on performance tuning, kernel hardening, and high availability.
Drive Infrastructure-as-Code using Terraform and Ansible to ensure compliant, repeatable deployments and configuration management.
Forecast infrastructure needs based on usage trends and recommend scaling strategies to ensure optimal resource utilization.
Lead and grow a small DevOps/SRE team, setting technical standards, performance benchmarks, and professional development paths.
Partner with Engineering, Product, and Clinical Operations to ensure architectures meet both business goals and regulatory standards.