资深 DevOps 工程师 | 远程 LATAM 仅限
Sr. DevOps Engineer | Remote LATAM Only
该职位的主要职责是评估、设计并执行当前符合HIPAA标准的基础设施向自托管服务器环境的迁移，同时保持相同的安全标准。工程师将主导向多租户SaaS模式及白标功能的过渡，确保Laravel API和Angular前端的部署实现自动化、可扩展且高度安全。
该职位为100%远程办公，仅面向拉丁美洲（LATAM）地区的候选人开放。其他地区申请将不予考虑。
主要职责：
- 审计与诊断：对现有架构（AS-IS）进行全面审计，识别安全风险和瓶颈。
- 迁移策略：设计并实施目标架构及服务器迁移的回滚计划。
- 自动化（CI/CD）：配置用于Laravel和Angular应用的自动化测试和部署流水线。
- 白标功能支持：重新设计基础设施以支持多个租户，具备独立品牌和完全数据隔离能力。
- 安全加固：通过日志集中化、访问追踪和加密备份维持HIPAA合规性。
关键要求
· 所需技能和能力：
· 技术经验：精通云环境（AWS、GCP或Azure）及最小停机时间的迁移策略。
- 安全：深入了解加密（KMS、SSL/TLS 1.2+）、密钥管理（Vault）以及受HIPAA标准约束的最小权限原则（IAM）。
- 数据库：有MySQL/PostgreSQL经验，包括复制、调优和针对多个客户的数据隔离策略。
- 可观测性：实现监控堆栈（Prometheus/Grafana）和日志集中化（ELK/Loki）。
- 思维方式：注重绝对自动化、安全设计和受监管系统的可扩展性。
最初发布于Himalayas
查看英文原文
The primary objective of this role is to evaluate, design, and execute the migration of the current HIPAA-compliant infrastructure toward a self-hosted server environment that maintains the same security standards. The engineer will lead the transition toward a multi-tenant SaaS model with white-labeling capabilities, ensuring that the deployment of the Laravel API and Angular frontend is automated, scalable, and highly secure.
This role is 100% remote but only open to candidates based in Latin America (LATAM). Applications outside this region will not be considered.
Key Responsibilities:
- Auditing and Diagnosis: Perform a complete audit of the current architecture (AS-IS) to identify security risks and bottlenecks.
- Migration Strategy: Design and implement the target architecture and the rollback plan for the server migration.
- Automation (CI/CD): Configure pipelines for automated testing and deployment of Laravel and Angular applications.
- White Label Enablement: Redesign the infrastructure to support multiple tenants with independent branding and total data isolation.
- Security Hardening: Maintain HIPAA compliance through log centralization, access traceability, and encrypted backups.
Key Requirements
· Skills and competencies needed:
· Technical Experience: Mastery of cloud environments (AWS, GCP, or Azure) and migration strategies with minimum downtime.
- Security: Deep knowledge of encryption (KMS, SSL/TLS 1.2+), secrets management (Vault), and least privilege principles (IAM) under HIPAA standards.
- Databases: Experience in MySQL/PostgreSQL, including replication, tuning, and data isolation strategies for multiple clients.
- Observability: Implementation of monitoring stacks (Prometheus/Grafana) and log centralization (ELK/Loki).
- Mindset: Focus on absolute automation, security by design, and scalability of regulated systems.
Originally posted on Himalayas