The Opportunity

We are seeking a Staff Platform Engineer to develop the infrastructure, tooling, and pipelines required to support the operational needs of our Medical Device product, from an embedded Linux fleet in the field to the cloud. Treating infrastructure as a product, you'll build the systems that let our device, cloud, and data-science software engineers ship quickly and safely. This is a hands-on, systems-minded role - you will write real tooling, not just pipeline YAML- and you will make the compliant path the fast path so we never trade patient safety for speed.

Key Responsibilities

Platform & Infrastructure

• OTA & Kiosk Fleet Lifecycle: Own the build, signing, rollout, rollback, and per-device configuration for our in-field Linux kiosk fleet—along with the update mechanisms, recovery mechanisms, and operational tooling that keep fielded devices safe and reliable, and working with our cloud system.

• CI/CD & Release Promotion: Own CI/CD, test-gated promotion, controlled approvals, and release traceability across both cloud and device software, defining the deployment control plane that makes releases boring, reversible, and auditable.

• Observability & Infrastructure Quality: Own the operational quality bar for the platform—observability, alerting, reliability, backup and recovery, auditability, and security controls—and build the tooling that makes the safe path the default path.

• AWS Infrastructure Support: Operate the AWS and Terraform foundation on which the product and engineering teams depend —reliable, secure, and reproducible—focused on keeping production systems running, rather than infrastructure for its own sake.

• Developer Self-Service: Establish golden paths and self-service tools that empower engineers to deploy independently, while serving as a direct advisor for complex build or deployment issues.

Execution & Ownership

• Hands-on Software Engineering: You design, build, test, and maintain real tooling and services, held to the same engineering standards as product code.

• Engineer How We Meet Regulation: Turn our regulatory requirements into automated, tested tooling tied directly to delivery—traceability, software bill of materials (SBOM), artifact signing, and audit trails, plus pipeline and device security.

Cross-Functional Collaboration

• Cross-Functional Execution: Be the platform infrastructure's technical voice with Product, Clinical, Regulatory, and InfoSec—translating their needs into platform work and supporting our clinical studies and regulatory submissions (e.g., 510(k) / De Novo).

• Data Platform Enablement: Support the data-science team's platform needs—reproducible environments, scalable compute, and reliable model serving—as they arise.

Essential Skills & Experience

• Proven Public Cloud Platform Experience: 8+ years in platform, DevOps, or infrastructure engineering in AWS, with Staff-level ownership of production CI/CD and release systems for a complex, distributed system manipulating and storing sensitive data—paired with strong, general software-engineering ability in a modern language (Python or Go)

• Linux & Device Fleet Operations: Experience operating Linux-based systems and fleets of networked/IoT devices, including OTA update strategies.

• CI/CD & Release Ownership: Demonstrated ownership of CI/CD and release/promotion systems, including test gating, approvals, and reversible deployments.

• Infrastructure as Code: Deep expertise in Terraform/Terragrunt, plus containerization (Docker; ECS/Fargate and/or Kubernetes).

• Observability & Production Reliability: Experience in building observability (Datadog/CloudWatch) and operating production systems for monitoring and alerting to provide reliability.

Highly Desired Skills & Experience

• Regulated, Safety-Critical, or High-Assurance Experience (strongly preferred): Experience delivering software in a regulated, safety-critical, or other high-assurance / sensitive-data environment—medical device (IEC 62304 Class B/C) preferred, with adjacent domains such as aerospace (DO-178C), automotive (ISO 26262) or other highly regulated / high-assurance environments (e.g., financial services, defense) also welcome

• Mender / Embedded OTA: Hands-on experience with Mender or comparable embedded-Linux update systems, including signed images and A/B update strategies.

• Medical Device / SaMD: Experience delivering "Software as a Medical Device" through the full lifecycle, and familiarity with FDA pathways (510(k) / De Novo).

• Security & Data Privacy Depth: Experience designing HIPAA/GDPR-compliant systems—audit logging, secure data transmission, PKI, device authentication, and threat modeling for connected devices.

• Data / ML Platform (MLOps): Experience in data engineering or infrastructure support for data-science and ML teams, including data versioning and production model serving.

• Networking & Multi-Cloud: Secure overlay networks (Tailscale/WireGuard) and multi-account/multi-region network design, and experience with GCP or Azure alongside AWS.

• Diagnostic & Imaging Devices: Familiarity with diagnostic or imaging devices that have hardware in the loop, or similar physiological monitoring platforms (e.g., ECG).