Infrastructure and Security Engineer

Statewise is hiring an Infrastructure and Security Engineer to own the infrastructure behind a Medicaid EHR platform built for pediatric nursing and IDD home care providers. This is a hands-on role for someone who treats security and reliability as engineering disciplines rather than checklists, and who wants to design, harden, and scale production systems instead of just keeping them running.

The platform runs on AWS, and the company says its compliance foundation is solid. The work now is taking infrastructure to a higher level of maturity: more resilient, more observable, more scalable, and hardened beyond baseline compliance.

What you will do

• Architect and maintain AWS infrastructure across compute, networking, databases, caching, storage, and serverless services, designing for scalability, elasticity, and cost efficiency.
• Own VPC architecture, subnet segmentation, routing, and security boundaries.
• Design and enforce IAM policies, least-privilege access, and secrets management, and strengthen encryption standards and key management.
• Improve monitoring, alerting, and observability across the stack, moving from reactive alerts to proactive system health signals.
• Define uptime expectations, SLAs, and capacity planning.
• Create and maintain incident response runbooks and disaster recovery plans, and regularly test backup and recovery procedures.
• Strengthen use of AWS security services including GuardDuty, WAF, CloudTrail, Config, and Security Hub.
• Own vulnerability scanning, patch management, and remediation tracking, and support audits, security assessments, and penetration test remediation.
• Improve and maintain Azure DevOps build and release pipelines, implement low-blast-radius release strategies, enforce security gates in deployment workflows, and improve rollback confidence.
• Partner with engineering on infrastructure for new services, drive infrastructure-as-code where it creates leverage, and influence decisions on scalability, cost, and security.

What they are looking for

• 5+ years of infrastructure, DevOps, or cloud engineering experience.
• Deep hands-on AWS experience (EC2, RDS, VPC, S3, Lambda, IAM) and a strong understanding of AWS security services and IAM best practices.
• Experience designing scalable, elastic production systems and maturing HIPAA-compliant environments.
• Strong networking fundamentals: VPCs, subnets, routing, DNS, load balancing.
• Experience with monitoring and observability tools such as CloudWatch, Datadog, or similar.
• Hands-on CI/CD pipeline experience, with Azure DevOps preferred.
• Familiarity with Infrastructure-as-Code (Terraform, CloudFormation, or CDK).
• Healthcare or regulated software experience strongly preferred.
• You take ownership of production outcomes, think in systems and failure domains, communicate risk and tradeoffs clearly, and are comfortable making production decisions under pressure.
• You use AI tools thoughtfully to speed up investigation, documentation, and operational clarity.

This role is not a fit if you

• Prefer managing infrastructure through the console rather than repeatable processes.
• Treat security as a compliance checkbox rather than an engineering practice.
• Are uncomfortable making production decisions without a full committee.
• Focus on tooling over outcomes, avoid documentation and knowledge sharing, or see monitoring as optional.

What success looks like

• Within 45 days: you understand the AWS architecture and security posture and have identified high-leverage improvements.
• Within 90 days: monitoring coverage is stronger, security controls are tightened, and release processes are safer and more predictable.
• Within 6 months: infrastructure is more resilient, observable, and audit-ready as a steady state.

Location and pay

This is a remote-first role. Proximity to Nashville or Fort Worth is a plus, not a requirement. You must be located in and authorized to work in the United States; Statewise does not provide visa sponsorship at this time. Pay is a competitive salary based on experience.

Benefits

• Medical insurance with employer contribution
• HSA with employer contribution
• Dental insurance available (employee-paid)
• 401(k) with employer match
• Flexible PTO, with an expectation that people actually take time off
• Paid parental leave

About Statewise

Statewise builds Medicaid home care software: an EMR and EVV platform built specifically for Medicaid home care providers across Pediatric Nursing, Therapy, Personal Care, and Intellectual and Developmental Disabilities services. The software is designed to handle state-by-state rules and clinical workflows without the bloat of traditional systems.