Job Summary:

The DevOps Contractor is a mid-level technical role focused on owning and advancing Imedview's Azure cloud infrastructure. This contract engagement is expected to devote its time to DevOps and infrastructure work across Azure, DNS and network management, CI/CD, database scripting, security and access management, monitoring, and infrastructure documentation.

Essential Responsibilities & Accountabilities

DevOps & Infrastructure 

• DevOps and infrastructure work represents the full scope of this engagement. The responsibilities below are expected to occupy all working time.

Azure Cloud Infrastructure 

• Provision, configure, and maintain Azure cloud resources including virtual machines, App Services, Blob Storage, Virtual Networks, and Azure Active Directory 
• Monitor resource health, performance, and cost; identify and implement optimization opportunities 
• Manage Azure subscriptions, resource groups, and environment configurations across development, staging, and production 
• Maintain infrastructure-as-code (IaC) using tools such as Terraform, Bicep, or ARM templates to ensure repeatable and auditable provisioning 

DNS & Network Management 

• Manage DNS zones, records, and configurations across all Imedview domains and subdomains 
• Administer SSL/TLS certificates including provisioning, renewal, and rotation across all environments 
• Maintain firewall rules, network security groups (NSGs), and Virtual Network (VNet) configurations in Azure 
• Configure and support VPN and secure remote access solutions for hybrid work environments 
• Troubleshoot DNS resolution, latency, and connectivity issues across cloud and on-premises systems 
• Document all DNS architecture, network topology, and configuration changes in the infrastructure runbook 

CI/CD Pipeline Management 

• Maintain and improve CI/CD pipelines that automate the build, test, and deployment of applications across all environments 
• Support environment promotion workflows ensuring changes progress through development, staging, and production with appropriate approvals and gates 

Database Scripting & Automation 

This role is expected to write and maintain scripts that support database operations across all environments. All scripts must follow Imedview security standards, handle data carefully given HIPAA obligations, and be documented and version-controlled alongside other infrastructure code. 

• Build and support database copy and cloning workflows to refresh lower environments with sanitized or anonymized copies of production data 
• Maintain automated backup scripts with scheduling, retention policies, and restore verification procedures 
• Store all database scripts in version control with clear documentation, usage instructions, and change history 

Security & Access Management 

• Enforce and maintain secrets management, and credential rotation using Azure Key Vault or equivalent tooling 
• Manage role-based access control (RBAC) across Azure, CI/CD systems, and internal platforms following the principle of least privilege 
• Maintain and regularly audit user access, service accounts, and API keys across all environments 
• Implement and maintain encryption standards for data at rest and in transit across all infrastructure components 
• Support SOC 2 compliance by implementing and evidencing infrastructure controls 
• Apply HIPAA-aligned infrastructure practices including access logging, audit trails, and PHI boundary controls 
• Participate in vulnerability scanning cycles and execute remediation within agreed timelines 

Monitoring, Reliability & On-Call 

• Configure and maintain monitoring, alerting, and logging across all infrastructure using Azure Monitor, Log Analytics, or equivalent platforms 
• Track uptime and performance against SLAs for production systems and report on reliability metrics 
• Respond to infrastructure incidents as part of a rotating on-call schedule, including outside of standard business hours (9-5 EST). Late nights not expected. 
• Contribute to post-incident reviews, helping identify root causes and preventative measures 
• Maintain and test disaster recovery procedures and backup configurations for all critical systems 

Infrastructure Documentation 

• Maintain clear, up-to-date documentation for all environments, pipelines, runbooks, and disaster recovery procedures 
• Log and track all infrastructure changes in accordance with the change management process 
• Contribute to internal knowledge sharing and support onboarding of new technical team members 

• Perform other duties as assigned to support business needs. 

Daily Tasks

Daily Tasks 

• Monitor infrastructure health dashboards, review alerts, and triage any active incidents or anomalies 
• Review CI/CD pipeline status and address any failed builds, deployment blockers, or environment issues 
• Check security tooling dashboards for vulnerability alerts, access anomalies, or certificate expiration warnings 
• Communicate infrastructure and pipeline status to the Head of Platform Engineering and the engineering team 
• Log and track all infrastructure changes in accordance with the change management process 

Weekly Tasks 

• Review patch and vulnerability status across all managed systems and execute or schedule remediation 
• Audit access logs and RBAC assignments to identify any unauthorized or anomalous activity 
• Meet with the Head of Platform Engineering to align infrastructure priorities, deployments, and open items 
• Update infrastructure documentation and runbooks to reflect on any changes made during the week 

Qualifications:

 Required 

• 3+ years of hands-on DevOps or infrastructure engineering experience in a production environment 
• Demonstrated Azure cloud expertise including compute, networking, storage, identity, and security services 
• Proven experience managing DNS zones, SSL/TLS certificates, and network configurations in a cloud environment 
• Experience building and maintaining CI/CD pipelines with environment promotion and deployment automation 
• Strong knowledge of secrets management, RBAC, and credential security best practices 
• Experience with infrastructure-as-code tools (Terraform, Bicep, ARM, or equivalent) 
• Scripting proficiency in Bash, Python, or a similar language for automation and database tasks 
• Solid understanding of cybersecurity principles including encryption, access controls, vulnerability management, and secure configuration 
• Strong documentation habits and the ability to maintain clear runbooks and architecture diagrams 
• Operates independently and takes ownership of assigned systems without close supervision 

• Strong communicator with the ability to collaborate across technical and non-technical teams

 
Preferred 

• Junior-level Ruby on Rails experience or meaningful exposure to a similar web application framework 
• A genuine interest in software development and a desire to grow engineering skills over time 
• Experience supporting SOC 2 Type I or Type II compliance programs from an infrastructure perspective 
• Familiarity with HIPAA Security Rule requirements and implementing controls in a regulated environment 
• Experience with containerization (Docker, Kubernetes, or Azure Kubernetes Service) 
• Familiarity with monitoring and logging platforms (Azure Monitor, Datadog, Grafana, or equivalent) 
• Experience working in a hybrid cloud or on-premises environment 
• Enthusiasm for AI-assisted development tools such as Claude Code and OpenAI APIs 
• Relevant certifications such as Microsoft Certified: Azure Administrator (AZ-104), Azure DevOps Engineer Expert (AZ-400), CompTIA Security+, or equivalent 

On Call Availability:

This role includes participation in a rotating on-call schedule to support the reliability and availability of Imedview’s production infrastructure. On-call responsibilities are shared across the technical team and are managed to ensure reasonable workload distribution. 

• On-call rotation covers evenings, weekends, and holidays on a shared rotation basis 
• Response time expectations for critical production incidents are defined in the incident response runbook 
• All on-call incidents must be logged and triaged; Severity 1 events require a postmortem 
• Compensation and time-in-lieu arrangements for on-call coverage are governed by Imedview’s HR policies 

What We Offer:

• A mid-level contract engagement with real ownership of the infrastructure that powers Imedview's daily operations 
• Hybrid work flexibility with remote-first culture and occasional in-person collaboration 
• Competitive contract rate commensurate with experience 
• A genuine dual-focus scope — DevOps ownership with meaningful software engineering contributions 
• Direct collaboration with the Senior Software Engineer and Head of Platform Engineering 
• A small, high-performing, and supportive team where your contributions are visible and valued 
• Exposure to emerging tooling and modern cloud practices across the engagement