Staff Infrastructure Engineer

Komodo Health is growing quickly, and so is the cloud infrastructure underneath it. You will join the Infrastructure team, which builds, operates, and continuously improves the cloud-native stack the entire engineering organization depends on (AWS, Kubernetes, Terraform, ArgoCD, GitHub Actions) along with the shared services layered on top of it: identity and access, API gateway and traffic management, secure network access, our internal developer platform, and the AWS organization and account foundations beneath all of it. Beyond keeping these systems reliable, scalable, and secure, the team drives FinOps discipline and compliance alignment (HIPAA, SOC2). We work in an international context toward one goal: reduce the burden of disease. This role exists to be the senior technical voice for Komodo's cloud infrastructure and shared services. Several of these platforms transferred to Infrastructure recently, and establishing durable ownership, operating practices, and modernization roadmaps for them is central to the charter. You will set the architecture, standards, and AI-assisted working patterns the rest of the team builds on, and partner closely with Engineering, Security, IT, and Data teams to meet the security and compliance demands of a rapidly evolving healthcare data landscape.

Responsibilities

Established AI-assisted workflows as the team's default operating model; brought inherited shared services under infrastructure-as-code with documented ownership, runbooks, and a published modernization roadmap; delivered measurable cloud cost reduction against annual savings commitment; improved platform currency and upgrade discipline across the shared-services estate; reduced developer friction and support toil by automating highest-volume manual request paths; own the architecture, operating model, and modernization roadmap for cloud infrastructure and shared services; design, build, and operate AWS and Kubernetes infrastructure as code (Terraform), delivered through GitOps (ArgoCD) and CI/CD (GitHub Actions); set the standards and safe patterns for AI-assisted infrastructure work; harden security and compliance posture: least-privilege IAM and RBAC, identity and access management, network boundaries, and secrets hygiene, aligned to SOC2; drive infrastructure optimization across reliability, scalability, developer experience, and cost; raise the technical bar across the infrastructure team through design review, mentorship, documentation, and enablement; participate in and improve the shared US-business-hours on-call rotation, incident response, and the alerting and runbooks behind it.

Requirements

8+ years in infrastructure, cloud, or platform engineering, including deep hands-on AWS experience running production systems at scale where security and cost were first-class concerns; Infrastructure-as-code proficiency with Terraform as a default working mode rather than an occasional tool; Kubernetes platform ownership (operated the platform itself, not only deployed workloads onto it); track record of taking ownership of ambiguous, inherited, or under-documented systems and bringing them to a defensible, well-operated state; fluency with AI-assisted engineering tools (Claude, OpenAI Codex, Cursor, GitHub Copilot, AWS Bedrock, or similar) and sound judgment about where they are and are not safe to apply; security and compliance fluency in a regulated environment (HIPAA, SOC2, or equivalent); staff-level partnership and influence; AI-native role expectations: shape how the team works, set standards and safe repeatable patterns for applying AI assistants to Terraform and script authoring, runbook and documentation generation, log and query analysis, and support triage; ensure all generated output is reviewed and validated before it reaches production; demonstrate deep expertise in multiple infrastructure domains and sufficient breadth to lead across adjacent domains.

Nice to have

Identity and access platforms: Okta, OIDC, SAML; API gateway and service networking: Envoy, or similar; Scripting and automation in Python, Go, or Bash; FinOps or cloud cost-optimization program experience; Observability at platform scale: metrics, logs, tracing, and alerting; Familiarity with cloud data warehouses such as Snowflake.

Benefits

Performance-based bonuses; equity awards; comprehensive health, dental, and vision insurance; flexible time off and holidays; 401(k) with company match; disability insurance and life insurance; leaves of absence in accordance with applicable state and local laws and regulations and company policy.