DevOps Engineer

About Personify Care

Personify Care is a digital health platform that turns manual hospital workflows into intelligent digital patient pathways, guiding patients from pre-admission through to recovery at home. Smart risk screening, automated communications, digital consent and real-time patient feedback work together to flag clinical risks early and keep every patient on track. The result is less paperwork and phone tag, faster clinical decisions and one connected view of the patient in place of fragmented processes.

We’re trusted by public and private health services across Australia and New Zealand, helping hospitals and clinics deliver safer, more efficient care. Now we’re evolving from digitising pathways to a platform that increasingly uses data and AI to anticipate risk, personalise care and help health systems do more with the capacity they have. We’re scaling fast and looking for people who want to build what patient care looks like next.

Personify Care was founded with a simple purpose: to connect every patient to the best possible care. We’re a team who care more about impact than titles or backgrounds. If you want meaningful work where you can see your impact on patients and clinicians in real time, this is the place for you.

The role

We are looking for a DevOps Engineer to own the platform end to end: reliability, security, data, delivery and cost. Our estate runs on AWS with PHP/CodeIgniter, MySQL, Redis, Docker and Bitbucket Pipelines. We are also building a new platform on Kubernetes/EKS with Terraform and Argo CD: a Go modular core and Python workers, Temporal for long-running workflows, TiDB for OLTP and HTAP, Kafka for integration and outbound events, Redis, S3 and OpenSearch. You will keep the current platform healthy, introduce the new one safely, and support the tenant-by-tenant migration with CDC and rollback.

This is a hands-on role. You will be close to production, close to the code, and close to the engineers who depend on the platform. You will have room to shape how we operate, but you will also be expected to do the unglamorous work — backups, access reviews, patching, runbooks and follow-through — that keeps a healthcare platform trustworthy.

What you will do

• Run the platform. Operate AWS, PHP/CodeIgniter, MySQL, Redis, Docker and Kubernetes/EKS; own deployments, capacity, patching, backups and recovery.
• Build the foundations. Use Terraform for AWS accounts, networking, IAM, secrets and cost controls; introduce Kubernetes, Argo CD/GitOps and a safe path for Go and Python services.
• Make security and compliance real. Apply least privilege, encryption and secrets management; run vulnerability, dependency and image scanning; protect PHI and keep audit evidence for Privacy Act/APPs, ISO 27001 and SOC 2.
• Run data safely. Operate MySQL now and TiDB later, including TiFlash, TiCDC and BR/PITR; prove backups and restores, and support CDC, batch backfill and reconciliation for the migration without guessing.
• Improve delivery. Own CI/CD on Bitbucket Pipelines today and Argo CD/GitOps next; make builds, scans, releases and rollbacks repeatable, with expand/contract database changes, blue green and canary releases.
• Keep it observable and documented. Own monitoring, logging, tracing and alerting with OpenTelemetry, Datadog or Prometheus/Grafana; define SLOs, run on-call and incident response, write runbooks, and automate repetitive work.

What we are looking for

Required

• Hands-on experience in DevOps, platform engineering, SRE or a closely related role, supporting production systems.
• Strong AWS experience: VPC, IAM, EC2, S3, RDS/Aurora, load balancing, DNS, TLS, networking and cost awareness.
• Production Kubernetes experience (EKS preferred): deployments, networking, resource management, troubleshooting and upgrades.
• Infrastructure as Code with Terraform (or equivalent) and a safe, reviewable change workflow.
• Strong Linux, TCP/IP, HTTP, DNS and TLS troubleshooting skills.
• CI/CD experience: build/test/scan/deploy/rollback pipelines, environment promotion, release discipline and GitOps (Argo CD or equivalent).
• Relational database operations: MySQL required; Redis and object storage; performance troubleshooting, backups, restore testing and point-in-time recovery.
• Experience with at least one of Kafka, TiDB or Temporal in production — or equivalent distributed-systems experience — and willingness to become fluent in the others.
• Data migration experience: CDC, batch backfill, reconciliation, cutover and rollback on a production system.
• Security fundamentals applied in practice: least privilege, secrets management, encryption, vulnerability management, container/image security and audit evidence.
• Scripting/automation in Python and Bash; comfort reading and writing production code, including Go.
• Observability experience: logs, metrics, traces, alerting, SLOs and dashboards (OpenTelemetry, Prometheus/Grafana, Datadog or CloudWatch).
• Incident response experience, including root-cause analysis and follow-through. •
• Excellent documentation, organisation and communication. You finish the unglamorous work: backups, access reviews, patching, runbooks.
• Australian work eligibility and ability to work from Australia.

Highly desirable

• TiDB in production: TiFlash, TiCDC, BR/PITR, resource groups, Top SQL and hotspot diagnosis.
• Temporal operations: namespaces, task queues, history limits and worker versioning.
• Kafka operations: Schema Registry, Protobuf, DLQ/replay and lag management.
• Debezium CDC, shadow reads and multi-tenant operations: schema-per-tenant, DDL fan-out, drift detection and quotas.
• Experience maintaining PHP/CodeIgniter, MySQL and Redis production systems — or a demonstrated respect for systems you did not design.
• Aptible, Bitbucket Pipelines, GitHub Actions, Docker and artifact registries. •
• EKS, RDS/Aurora, AWS Organizations/Control Tower, Service Catalog or similar platform tooling.
• ISO 27001, SOC 2, PCI-DSS or healthcare privacy programmes.
• Healthcare, digital health or another regulated, sensitive-data environment. •
• SAST/DAST, IaC scanning, container scanning, secret detection and supply-chain security.
• Disaster recovery design with explicit RTO/RPO and restoration testing.
• OpenSearch, Metabase or similar analytics infrastructure; event-driven/workflow systems.
• Experience working with distributed engineering teams and multiple environments.

How we work

• Security is a clinical requirement. Patient data is clinical data, and privacy is part of the product.
• Evidence over guesswork. We debug with logs, metrics, traces and reproducible tests.
• Small, reversible changes. We prefer safe, observable steps over big-bang changes.
• Ownership and follow-through. We finish the work, including the invisible parts. •
• Pragmatism. We balance reliability, security, delivery speed and cost, and avoid complexity that does not pay for itself.

What we value

• Care. We build for patients and clinicians; the details matter.
• Precision. We verify assumptions, review changes, and catch small issues before they become incidents.
• Accountability. We own the outcome, not just the ticket. Follow-through. We document, track and finish the work — especially the unglamorous parts.

Personify Care values people who combine strong technical capability with care, precision and accountability. If this sounds like you, we would like to hear from you.