Senior DevOps Engineer

About Ethical Paths Ethical Paths is an early-stage enterprise SaaS company building an AI-native compliance operating system for life science companies. Our founders are a former biopharma Chief Compliance Officer and a co-founder of DataRobot. Our customers will range from pre-commercial biotechs to global pharmaceutical companies. The Role We are looking for a DevOps Engineer, an individual contributor who both builds infrastructure and operates it. You will own the AWS infrastructure our platform depends on, the pipeline that ships to it, and the security tooling around both. This is a hands-on role covering the design decisions as well as the day-to-day operation. You will work directly with the Senior Software Engineer and the founders. Two things shape that work: each customer runs in a dedicated, isolated AWS environment, so you are operating a fleet rather than a single system, and we build through AI coding agents whose output is reviewed and gated before it lands. What You Will Own AWS infrastructure: Account structure, environment provisioning, infrastructure-as-code, and the control plane that stands up and configures each customer deployment.Fleet operations: Zero-downtime releases across independent customer environments, inventory, driftThe agent platform: The sandboxes agents execute in, capacity and concurrency, credential issuance, cost attribution, and availability.Observability and incident response: Alerting, dashboards, log and audit-trail pipelines, on-call, and post-incident reviews.The delivery pipeline: The automated path a change takes from a developer’s machine to production, and the checks it must pass on the way: review rules that cannot be bypassed, security scanning, and audits of third-party dependencies and infrastructure definitions.Network and access boundaries: Zero-trust network configuration, least-privilege access, and secrets management.The infrastructure evidence for security reviews: Access control, encryption, segmentation, logging, and backup and recovery, in a form customer security teams and auditors can verify directly. What We Are Looking For Must-have You have operated production cloud infrastructure carrying sensitive enterprise workloads.You have built and operated AWS environments at scale: account structure and organizational guardrails, identity and access management, and infrastructure defined and maintained as code.You have embedded security and compliance checks into a CI/CD pipeline and operated with them in place.You have been on-call for production systems, and designed the alerting behind it.You have supported SOC 2 Type II or an equivalent audit cycle as an engineering practice: evidence, change control, and access reviews.Your infrastructure automation is developed and maintained to the same standard as application code. Preferred Experience operating a fleet of isolated single-tenant deployments from a shared control plane.Experience running AI agent or other non-deterministic workloads in production, including their cost and capacity behavior.Experience with cloud and inference cost attribution, budgets, and anomaly detection.Experience with supply-chain hardening, such as pinned dependencies, signed releases, and digest-pinned deployments.Experience with self-hosted source control and CI/CD systems.Experience in a regulated environment such as HIPAA, GxP, or FedRAMP. What We Offer Compensation Competitive base salary and equityHealth and insurance Medical, dental, and vision insuranceLife and disability insuranceTime and flexibility Flexible time off, coordinated with your teamFlexible working hours and location, with remote and hybrid options