Senior DevOps Engineer (On Site-Only)

OneOncology • Ridge, NY

5d • $165,000 - $175,000 • Onsite

About The Position

New York Cancer & Blood Specialists (NYCBS) is seeking a talented and security-minded DevOps/AWS Engineer to oversee the infrastructure, deployment, and software development of our software engineering team. In this role, you will bridge the gap between development and operations, ensuring our engineering team can ship code rapidly, reliably, and securely. The ideal candidate views security not as a final checklist, but as the foundation of every architecture design. You will take ownership of our AWS environment and will be responsible for implementing automated guardrails that protect our data while empowering developers.

Requirements

• 4+ years of hands-on experience with core AWS services (EC2, S3, RDS, Lambda, ECS/EKS, IAM, VPC).
• Experience with Terraform (preferred), AWS CloudFormation, or AWS CDK.
• Experience with Github Actions
• Strong understanding of cloud security best practices (AWS Well-Architected Framework), encryption (KMS, TLS), and secret management (AWS Secrets Manager, HashiCorp Vault).
• Experience with Docker and container orchestration platforms (AWS ECS or Kubernetes).
• Proficient scripting skills in Python, Bash, or Go to automate operational tasks and assist developers.

Nice To Haves

• Terraform (preferred)

Responsibilities

• Design, build, and maintain scalable, fault-tolerant, and highly available AWS cloud infrastructure using Infrastructure as Code
• Monitor cloud spend and implement cost-optimization strategies without compromising performance or security.
• Manage core AWS networking and identity components (VPC, Route 53, IAM, Security Groups).
• Work closely with the software engineering team to standardize development environments and streamline local-to-production workflows
• Enforce the principle of least privilege across all AWS IAM policies, roles, and user access.
• Implement robust logging, monitoring, and alerting frameworks (e.g., AWS CloudTrail, CloudWatch, GuardDuty) to proactively detect and mitigate security threats.
• Maintain infrastructure configurations to meet relevant compliance standards (HIPAA).

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed