Dev-ops Engineer
Contact person: HR Chairside Solutions
Jersey city, USA
Description
Job Posting — DevOps Engineer
About Chairside
The role
What you'll do
Why join
About Chairside
Chairside Solutions is building Giyani, an AI operating layer for dental practices. We sit on top of the practice management systems dentists already use and handle the busywork around them: scheduling, insurance eligibility and claims, patient communication and recall, plus voice agents that answer the phone.
We were founded by a practicing pediatric dentist and a technologist, and we work as a HIPAA business associate to the practices we serve. That means security and reliability aren't extras here. They're the product.
The role
You'll own Chairside's cloud infrastructure end to end: the AWS accounts, the Kubernetes clusters, the pipelines that ship our code, and the controls that keep patient data safe. You'll be the DevOps owner every engineer turns to when they need access, a deploy, or an answer about why something is down.
This is a hands-on role on a small team. You'll design the platform and do the work, and you'll write the runbooks so others can follow it.
Location: Remote · Type: contract · Reports to: CTO
What you'll do
Cloud and infrastructure as code
- Own our multi-account AWS setup (management, shared and environment accounts) with SSO-based access and least-privilege IAM.
- Build and maintain everything in Terraform: networking, EKS clusters, RDS Postgres, ECR, KMS, Secrets Manager, DNS and TLS. All changes go through reviewed pull requests, never by hand.
- Stand up new environments (staging, then production) from the same templates.
Kubernetes and deployments
- Run our Amazon EKS clusters and the Helm charts that deploy our services: Spring Boot backends, a FastAPI AI service, and a React frontend.
- Own the release flow: amd64 image builds, immutable image tags in ECR, version bumps by PR, and Helm rollouts with safe rollback.
- Make sure database migrations (Liquibase) run cleanly as part of each deploy.
CI/CD
- Build and improve GitHub Actions pipelines for build, test, Terraform plan/apply and deploy, using OIDC roles instead of static keys.
- Move manual release steps into automated pipelines over time.
Security and compliance
- Keep the platform HIPAA-ready and produce evidence for SOC 2 (change management, audit logging, encryption at rest and in transit).
- Manage secrets through AWS Secrets Manager and External Secrets, including rotation.
- Own network access controls, cluster allowlists, and access requests for engineers and contractors.
- Support vendor security reviews and BAAs for cloud and AI services we run on (for example, AWS Bedrock).
Reliability and observability
- Set up CloudWatch metrics, alarms and dashboards, and route alerts to the right people.
- Own backups, restore testing and disaster recovery for our databases.
- Lead incident response and write the postmortems.
Cost and developer experience
- Keep AWS spend in check (for example, parking dev environments when idle and right-sizing nodes).
- Write clear runbooks and SOPs in Confluence so any engineer can deploy, debug and get access on their own.
- Onboard new developers to AWS, the clusters and our tooling.
- 3+ years in a DevOps, SRE or platform engineering role.
- Strong, hands-on AWS experience: IAM, VPC, EKS, RDS, ECR, KMS and Secrets Manager.
- Production Terraform, including remote state, modules and PR-based workflows.
- Kubernetes and Helm in production: deploying, debugging pods, and rolling back.
- CI/CD with GitHub Actions (or similar) and Docker image builds.
- Comfort with Linux, shell scripting and Git.
- Experience setting up monitoring, alerting and backups.
- A habit of writing things down. Your runbooks should let someone new succeed on their first try.
- Experience in healthcare or another regulated industry (HIPAA, SOC 2, PCI).
- Familiarity with Java/Spring Boot or Python services and how they run in containers.
- External Secrets Operator, Kafka or Redis in Kubernetes.
- AWS certifications (Solutions Architect, DevOps Engineer or Security).
- Startup experience, where you've built infrastructure from the ground up.
AWS (EKS, RDS Postgres, ECR, Secrets Manager, KMS, Bedrock) · Terraform · Kubernetes and Helm · GitHub Actions · Docker · Spring Boot, FastAPI and React · Auth0 · Twilio, LiveKit and Deepgram for voice
Why join
- Build the platform for a product that gives dental teams hours back every day.
- Real ownership: you set the standards for how we build, ship and secure our infrastructure.
- A small, fast team that includes practicing dentists, so you see the impact of your work up close.
Send your resume and a short note about infrastructure you've built or improved to ***@***.solutions. Links to runbooks, Terraform or other work you're proud of are welcome.