RightMove Health

DevSecOps / Platform Engineer (Boston preferred)

Boston, MA

Sponsorship not specifiedDetected 29 days ago

TypeScriptAWSTerraformCI/CDPlatform EngineeringCybersecurityComplianceOutbound SalesHIPAA

About the role

This is a sole-platform-engineer role today, with real autonomy and real scope.
You'll work across infrastructure, developer experience, and security/compliance.

You'll build tooling so that we don't have to keep reinventing the wheel; you'll standardize and update our infrastructure; and you'll own and update our CI/CD pipeline so we can deploy code safely and quickly.
Wha t you'll own: Application infrastructure Build and maintain reusable infrastructure components, so application engineers can safely stand up new components without shooting themselves in the foot.
Security Engineering You'll own security tooling integration across our SDLC - embedding automated scanning and policy enforcement so that security is a feature of our delivery pipeline, not a final gate.
Implement guardrails and controls using AWS-native services such as AWS Security Hub, GuardDuty, and Config; conduct regular vulnerability scans, configuration reviews, and remediation tracking.
Other duties Act as the technical interface to our outsourced IT department and recognize when our users need additional support.

Solid infrastructure-as-code expertise (Terraform, CloudFormation, CDK, or similar).
Comfort operating with autonomy in a small team where you'll likely wear many hats.

Experience supporting SOC 2, HIPAA, or similar audits/compliance regimes.
SSO / identity tooling (Okta, AWS IAM Identity Center, etc.).
Solve concrete infra needs as they arise - everything from setting up SFTP sites for customer file-sharing to creating a pathway so that outbound API requests are sent from a fixed IP.
Standardize and harden our AWS footprint, with security, budget, and HIPAA considerations front of mind.
Developer experience Make our CI/CD pipelines faster and more effective.
Solve developer pain points like shared dev environments and locally running code.
conduct regular vulnerability scans, configuration reviews, and remediation tracking.
We're currently transitioning from the Serverless Framework to CDK (TypeScript)

Help us move to the next stage of maturity with improved monitoring and alerting tools.
Run and tune SAST, DAST, SCA, and container scanning tools so the signal-to-noise ratio is actually usable.
Solid grasp of cloud security fundamentals (IAM, network boundaries, secrets, least privilege).

We partner with PCPs, Orthopedic specialists, and health plans to deliver high-value, patient-centered MSK care.

to free people to move and thrive.
At RightMove, we move fast, collaborate deeply, and deliver with precision.
We're a startup with enterprise-grade rigor-where talented operators, engineers and clinicians challenge conventions to improve patient outcomes.
Perform to Win - We bring our best to deliver measurable results, valuing impact over optics.
Be Direct with Respect - We communicate clearly, with honesty and care.
Move as One Team - We win together, across roles and functions.
Act with Agency - Our teams have high trust and high accountability, with the freedom to own and responsibility to deliver.
Choose Optimism - We bring energy and perspective, even when the work is hard.

This listing is sourced directly from RightMove Health's careers page and normalized into a canonical job model.