Senior Platform Engineer, Medical Devices

SandboxAQ • Palo Alto, CA

17h • Remote

About The Position

SandboxAQ is seeking a Senior Platform Engineer to develop the infrastructure, tooling, and pipelines required to support the operational needs of their Medical Device product. This role involves managing systems from an embedded Linux fleet in the field to the cloud, treating infrastructure as a product to enable device, cloud, and data-science software engineers to ship quickly and safely. It is a hands-on, systems-minded role focused on building real tooling and ensuring that the compliant path is the fast path, without compromising patient safety.

Requirements

• 8+ years in platform, DevOps, or infrastructure engineering in AWS.
• Staff-level ownership of production CI/CD and release systems for a complex, distributed system manipulating and storing sensitive data.
• Strong software-engineering ability in a modern language (Python or Go).
• Experience operating Linux-based systems and fleets of networked/IoT devices, including OTA update strategies.
• Demonstrated ownership of CI/CD and release/promotion systems, including test gating, approvals, and reversible deployments.
• Deep expertise in Terraform/Terragrunt.
• Expertise in containerization (Docker; ECS/Fargate and/or Kubernetes).
• Experience in building observability (Datadog/CloudWatch) and operating production systems for monitoring and alerting to provide reliability.

Nice To Haves

• Experience delivering software in a regulated, safety-critical, or other high-assurance / sensitive-data environment—medical device (IEC 62304 Class B/C) preferred.
• Hands-on experience with Mender or comparable embedded-Linux update systems, including signed images and A/B update strategies.
• Experience delivering "Software as a Medical Device" through the full lifecycle, and familiarity with FDA pathways (510(k) / De Novo).
• Experience designing HIPAA/GDPR-compliant systems—audit logging, secure data transmission, PKI, device authentication, and threat modeling for connected devices.
• Experience in data engineering or infrastructure support for data-science and ML teams, including data versioning and production model serving.
• Secure overlay networks (Tailscale/WireGuard) and multi-account/multi-region network design.
• Experience with GCP or Azure alongside AWS.
• Familiarity with diagnostic or imaging devices that have hardware in the loop, or similar physiological monitoring platforms (e.g., ECG).

Responsibilities

• Own the build, signing, rollout, rollback, and per-device configuration for the in-field Linux kiosk fleet, including update and recovery mechanisms, and operational tooling.
• Own CI/CD, test-gated promotion, controlled approvals, and release traceability across both cloud and device software.
• Own the operational quality bar for the platform, including observability, alerting, reliability, backup and recovery, auditability, and security controls.
• Operate the AWS and Terraform foundation, focusing on keeping production systems running.
• Establish golden paths and self-service tools for engineers to deploy independently.
• Design, build, test, and maintain real tooling and services.
• Translate regulatory requirements into automated, tested tooling tied directly to delivery, including traceability, software bill of materials (SBOM), artifact signing, and audit trails.
• Act as the platform infrastructure's technical voice with Product, Clinical, Regulatory, and InfoSec.
• Support the data-science team's platform needs, including reproducible environments, scalable compute, and reliable model serving.

Benefits

• Comprehensive medical, dental, and vision coverage for employees and dependents with generous employer premium contributions
• Retirement savings with company matching
• Paid parental leave
• Inclusive family-building benefits
• Equity participation

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed