Empeek

The Role: A long-term eCommerce project where the DevOps role is focused on administration, auditing, and support. You will be responsible for ensuring smooth operations, managing access and processes, and supporting internal teams, while collaborating with other specialists who handle development and infrastructure engineering.

Requirements:

• At least 4-5 years of relevant experience.
• Deep understanding of the modern CI/CD concepts.
• Deep understanding of Docker and different containers orchestration technologies - Kubernetes, ECS.
• Ability to build end-to-end DevOps automation encompassing QA automation,CI/CD, IAC, etc.
• Hands-on Infra architectural knowledge of internet-scale web apps e.g. Loadbalancers, CDNs, Data lakes etc.
• Experience with CDNs (Fastly preferred).
• Experience with IAC solutions like Terraform, AWS IAC etc.
• Experience with AWS technologies, such as EC2, S3, RDS, ECS, EKS, ECR, Route 53, CodeBuild, CodeDeploy, etc.
• Ability to write and understand scripts (Shell, Python, etc).
• Experience with managing relational databases — MS SQL Server, Postgres, MySql.
• Knowledge of best practices and IT operations in an always-up, always-availableservice.
• English level of Upper-Intermediate or higher; fluent in Ukrainian.

Must have:

• Problem-solving mindset, adaptability, and decisiveness.
• Be ready to give commitment and take responsibility.

• Be proactive and be able to point out problems.

   

Key Responsibilities:

• GitHub Enterprise administration (user onboarding/offboarding, groups, permissions, AuditLog).
• SonarQube enterprise administration (projects creation, user/permission administration, familiarity with log/db troubleshooting, version upgrades, migrations, keeping integration tokens with GitHub SAST/DAST pipelines up to date).
• AWS SSO/Identity Center administration — User/Groups/Permission sets, IAM policies management, Audit using Terraform IaC, aws cli, console.
• AWS account creation/deletion using AWS account factory.
• AWS Organization management — Billing configuration, cost reports, opening support tickets.
• Support DataDog integrations with AWS Org/GitHub Enterprise/SonarQube Enterprise/custom containerized applications running on AWS ECS clusters using OTLP/DDOT.
• Perform regular User Access Reviews (UAR) for AWS Identity Center/GitHub Enterprise/SonarQube Enterprise.
• Manage CI/CD pipelines on SonarQube, AnthonyTravel applications (also backstage stage env).
• PR review for each change in the IaC (terraform) structure.

• Assist with regular audits for PCI and SOX compliance efforts as well as addressing any issues with people’s access/privileges being appropriate and people not properly offboarded.

   

Working hours: aligned with US time zones (Central / Eastern Time)

Why join Empeek? ✨

• Challenging & meaningful products — complex architectures, modern technologies, and solutions that truly make an impact.
• Professional growth — personal development plan, mentorship, career maps, and opportunities to grow into new roles and responsibilities.
• Strong team culture — we share the same mission, values, and passion for what we do.
• Flexibility & ownership — freedom to choose your format and schedule, focus on results, and have a real impact on the company’s success.

Hiring process: → Interview with Recruiter (up to 30 min) → Technical interview (up to 60 min) → Interview with PM (up to 30 min)→ Client interview (up to 60 min) → Offer 🥳

What we offer:

• Access to learning opportunities — internal and external training, certification reimbursement.
• 18 paid vacation days, 10 public holidays, and up to 10 paid sick days.
• Up to $300/year for English classes + free speaking club.
• Up to $180/year for sports activities.
• Mentorship and knowledge sharing — people you can really learn from.
• Career maps and growth plans to support your professional development.
• New equipment provision, and accounting support if needed.
• Internal mobility — the opportunity to switch roles and take on more responsibility.
• Competitive market-level salary with regular reviews.
• Additional perks and compensations such as insurance fund, gifts etc.
• Psychological safety and supportive culture.
• Company values that align with yours.
• Community and team-building activities for informal networking.
• Social responsibility — support for the Armed Forces.

We are looking for a Senior DevOps Engineer to join our team on a greenfield Cloud Analytics Platform built for the healthcare industry. This is not a typical infrastructure role — you will be architecting a production-ready environment from scratch, implementing Privacy by Design, and building the secure foundation that allows AI to reason over complex medical data. If you enjoy clean tech, meaningful challenges, and want your work to have a real impact on healthcare education quality, this role is for you.

The Project
A greenfield Cloud Analytics Platform focused on the healthcare industry, providing deep insights into medical simulation training data. The platform is being built to become the global industry standard for medical simulation reporting. You will be responsible for designing and delivering the entire Azure-based infrastructure — from networking and multi-tenant isolation to AI-native deployment and disaster recovery — supporting a production-ready MVP within 16 weeks.

Tech requirements:

• Expert knowledge of Azure services: Azure Container Apps, Azure Database for PostgreSQL, Blob Storage, VNet, and network security.
• Proven experience building automated CI/CD pipelines using GitHub Actions and Docker for containerization of .NET and React applications.
• Proficiency in Infrastructure as Code (IaC) — Terraform or Bicep.
• Deep understanding of Privacy by Design and GDPR implementation: encryption at rest (Azure Storage encryption / customer-managed keys via Key Vault), TLS 1.3 in transit, column-level encryption for PII, PII protection, and audit logging.
• Experience setting up monitoring and alerting using Azure Monitor and Application Insights to meet performance SLAs (<3s dashboard load).
• English — Upper-Intermediate (B2) or higher (ability to write documentation, commits, and communicate with an English-speaking team). Ukrainian — fluent.

What you will do:

• Design and deploy the Azure environment — including VPCs, managed databases, and container runtimes — to support a production-ready MVP within 16 weeks.
• Support multi-tenant isolation at the infrastructure layer: network segmentation, secrets scoping, and encryption boundaries.
• Configure and scale infrastructure for daily batch ingestion and historical data loads covering 7 years of simulation data.
• Set up automated backup policies, encryption protocols, and finalize the Disaster Recovery (DR) plan to ensure platform resilience.
• Support the deployment of the MCP (Model Context Protocol) Tool Server, enabling Claude AI to interact securely with the platform’s metrics.

Why this role stands out:

• Build the secure “bridge” that allows AI to reason over complex medical data using the Model Context Protocol (MCP) in a real production environment.
• Implement Privacy by Design from Day 1 — GDPR compliance, PII pseudonymization, and column-level encryption built into the core architecture from Phase 1.
• Work on a project aimed at creating the gold standard for medical simulation reporting worldwide.
• Clean, modern tech stack: .NET 10, React, PostgreSQL — no legacy code, no outdated infrastructure.

Why join Empeek? ✨
Challenging & meaningful products — complex architectures, modern technologies, and solutions that truly make an impact.
Professional growth — personal development plan, mentorship, career maps, and opportunities to grow into new roles and responsibilities.
Strong team culture — we share the same mission, values, and passion for what we do.
Flexibility & ownership — freedom to choose your format and schedule, focus on results, and have a real impact on the company’s success.