Lead Site Reliability Engineer- Security

Join us as we work to create a thriving ecosystem that delivers accessible, high-quality, and sustainable healthcare for all.

Lead Site Reliability Engineer- Security

We are seeking a highly skilled and motivated Lead Site Reliability Engineer (SRE) to join our team, focusing on critical information security initiatives while supporting our operations engineers in maintaining essential internal services. The ideal candidate will have a strong background in information security practices, with expertise in operating system hardening, container image hardening and standardization, as well as patch and vulnerability management. Additionally, the SRE will work collaboratively with our existing team to ensure the stability and reliability of internal services responsible for secrets management and automation, service discovery, and configuration as code.

Key Responsibilities:

Information Security Focus:

• In coordination with our Information Security team, lead engineering efforts to adhere to policies related to operating system hardening for virtual machines and container image generation for Kubernetes orchestrated workloads.
• Manage patching and vulnerability management processes to mitigate security risks across the infrastructure.
• Collaborate with cross-functional teams to assess security risks and recommend solutions, ensuring compliance with security policies and best practices.
• Work alongside team members and vendors in implementation and support of new tooling to further enable a more hardened security posture for our infrastructure.

Site Reliability Engineering Support:

• Work closely with the existing SRE team to maintain and improve internal services that support operations engineers, utilizing tools such as Puppet, Terraform, Jenkins, Terraform, and Kubernetes for infrastructure both on-premises and in AWS.
• Administer and support HashiCorp Vault for secure secret management.
• Ensure the deployment and operational efficiency of Consul for service discovery and configuration management.
• Manage Terraform infrastructure as code to create and maintain cloud and on-premises resources effectively.
• Monitor system performance, reliability, and availability, implementing proactive measures to address potential issues.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• Proven experience as a Site Reliability Engineer or similar role, with a strong focus on information security.
• In-depth knowledge of operating system hardening techniques and best practices (Enterprise Linux preferred).
• Experience with containerization technologies (Docker, Kubernetes) and implementing security measures.
• Familiarity with vulnerability assessment tools and patch management processes.
• Proficient in using and managing HashiCorp Vault, Consul, and Terraform.
• Strong scripting skills (Python, Bash, Go, or similar) for automation and system management tasks.
• Excellent problem-solving skills, attention to detail, and ability to work in a fast-paced environment.
• Strong communication and collaboration skills, with the ability to work effectively within a team and across departments.

Preferred Qualifications:

• Relevant certifications are a plus.
• Experience in cloud computing environments (AWS, GCP, Azure).
• Understanding of network security concepts and practices.

About athenahealth

Here’s our vision: To create a thriving ecosystem that delivers accessible, high-quality, and sustainable healthcare for all.  

What’s unique about our locations? 
From an historic, 19th century arsenal to a converted, landmark power plant, all of athenahealth’s offices were carefully chosen to represent our innovative spirit and promote the most positive and productive work environment for our teams. Our 10 offices across the United States and India — plus numerous remote employees — all work to modernize the healthcare experience, together. 
 
Our company culture might be our best feature. 
We don't take ourselves too seriously. But our wor