US-based devops engineer for on-demand sensitive tasks

We are seeking a US-based, part-time, on-demand devops engineer to support our dev team. You will report directly to our Co-Founder and Co-CEO to handle important, sensitive tasks as needed. CONTEXT We are a SaaS company that provides services to US companies in regulated industries like financial services and healthcare. Because of this, we are subject to SOC 2 and HIPAA compliance requirements, including that sensitive data must only be accessed within the US. We have a team of engineers based in Brazil, and they're able to operate effectively without having access to sensitive data but only with occasional help from one of our co-founders, who's based in the US (along with our other co-founder and chief of staff). This co-founder is technical but not a working engineer. He lacks the time to best support the dev team at all times, and when he travels outside the country we face increased risk of experiencing an issue that's difficult to resolve without him (or the dev team) being able to access sensitive data. ROLE We are seeking a backend engineer with devops experience to help support our dev team. Because of the context shared above, you must be US-based, so that you can compliantly access sensitive data when needed. This is a part-time role with a very low time commitment (0-2 hours per week), but you must be able to operate on-demand, working to respond to a request within 1 hour of us making it, unless we indicate it's not urgent. You must also be willing to be on call, reachable at all hours if necessary. (We will of course only page you if it's truly urgent and we can't resolve an issue without your help, which should be extremely rare, but you need to be reachable in case this ever happens.) Given that this role involves operating within compliance requirements to access sensitive data, you will need to go through a full onboarding process (including completing a background check, agreeing to company policies, etc.) and conduct your work using only a company managed computer, which you will need to have with you in case urgent work is needed. Lastly, you will need to give us at least 1 month's notice if you plan to travel outside of the US, so that we can make contingency plans if needed. To summarize, it's REQUIRED that you are: - US-based - Available on demand (for 0-2 hours per week) - Willing to be reachable at all times in case it's necessary - Able to complete a full onboarding process (including a background check) - Able to keep a company computer with you - Prepared to give us at least 1 month's notice of any travel outside the US - Skilled in devops (see below) SKILLS Need to have: - Kubernetes: comfortable with kubectl — pods, logs, deployments, restarts, port-forward - Helm: values files, releases, and managing encrypted secrets (helm-secrets / SOPS / KMS) - AWS: IAM roles with MFA, EKS, RDS, ElastiCache, CloudWatch, ECR - Terraform/Terragrunt: able to read a plan, apply prepared changes, and verify the result - GitOps workflow: everything through Git PRs and ArgoCD - Debugging skills: find the cause of a production issue using logs and metrics (New Relic, CloudWatch) and report it clearly - Good written communication and comfort working async with a remote team Nice to have: - CircleCI - SOPS - Node.js ecosystem - Previous experience with SOC 2 and/or HIPAA compliance If you meet all the requirements, we encourage you to apply! We will compensate you very well for a job well done.