DevOps Engineer

About this Role

The DevOps Engineer will own and evolve Crystal's cloud infrastructure, the backbone that keeps over 10,000 eyecare professionals online and operational every day. This is a high-ownership, hands-on role sitting at the intersection of infrastructure reliability, developer productivity, and operational excellence. You'll work closely with the engineering team while independently driving the maturity of our AWS environment, CI/CD pipelines, containerization strategy, and observability platform.

This isn't a maintenance role. We have a decent foundation and need someone to scale it. You’ll bring engineering rigor, automation, and modern DevOps practices to a platform that's growing fast.

• Design, build, and maintain AWS infrastructure with a focus on reliability, security, and cost efficiency
• Own and modernize CI/CD pipelines to accelerate safe, frequent software delivery across all product lines
• Lead containerization efforts and drive Kubernetes or ECS adoption to improve deployment consistency and scalability
• Implement and maintain Infrastructure as Code (IaC) using Terraform across all environments
• Build comprehensive monitoring, alerting, and observability systems; own incident response for infrastructure events
• Establish cloud cost management practices — baseline spend, identify optimization opportunities, and implement savings
• Maintain a HIPAA-aware security posture including access controls, encryption standards, audit logging, and vulnerability management
• Manage virtual desktop infrastructure (AWS WorkSpaces, AppStream, or equivalent) for internal teams and contractors, including provisioning, imaging, and access control
• Support hybrid and multi-cloud infrastructure, including hands-on Azure work alongside our primary AWS environment
• Partner closely with software engineers to embed DevOps practices into the development lifecycle
• Document infrastructure architecture, runbooks, and operational procedures to support team resilience

Key Responsibilities

Owns Cloud Infrastructure & DevOps Excellence

• A high-ownership individual who takes full accountability for infrastructure uptime, performance, and security
• A builder mentality: can assess the current state, design a better target state, and execute the transition without waiting to be directed
• Comfortable operating as the sole infrastructure owner while collaborating fluidly with a software engineering team
• Proven experience designing and managing AWS infrastructure at scale, with hands-on Terraform IaC proficiency
• 4+ years of DevOps or infrastructure engineering experience with direct ownership of production environments
• Track record of building or modernizing CI/CD pipelines that measurably improved deployment frequency, reliability, or developer experience
• Experience containerizing applications and managing workloads in Kubernetes or ECS
• Strong scripting ability in Bash and/or Python to automate operational workflows
• Experience implementing monitoring and observability platforms with on-call incident response processes to match

Qualifications

Required

• 4+ years of DevOps or infrastructure engineering experience with production AWS ownership
• Deep AWS expertise — EC2, RDS, ECS/EKS, S3, IAM, VPC, Route 53, CloudWatch, and related services
• Strong Terraform proficiency; ability to design, write, and maintain IaC from scratch
• CI/CD pipeline experience (GitHub Actions, CircleCI, Jenkins, or similar tools)
• Container and orchestration experience — Docker required; Kubernetes or ECS strongly preferred
• Scripting proficiency in Bash and/or Python for automation and tooling
• Experience with monitoring and observability tooling and ownership of incident response processes
• Strong operational mindset with comfort around runbooks, change management, and on-call ownership

Preferred

• Hands-on Azure experience 
• Familiarity with HIPAA compliance requirements in healthcare SaaS environments
• Experience with cloud cost management tooling (AWS Cost Explorer, Infracost, or similar)
• Security tooling experience (AWS Security Hub, GuardDuty, Snyk, or equivalent)
• Background supporting a rapidly growing SaaS company through a platform scaling inflection point
• Comfortable coordinating directly with external managed service providers and migration/implementation partners