DevOps/Cloud Engineer

Employment Type Full time; Monday-Friday, 8 am-5pm (every other Friday off)

Must be a resident of the state of Idaho or Utah

To apply, send resumes to hr@bestnotes.com

Visit Bestnotes.com to learn about our organization.

Reports To: CTO

Job Description: DevOps / Cloud Engineer

Position Summary

We are seeking a skilled DevOps / Systems Administrator to help maintain, secure, and evolve

our cloud infrastructure in Google Cloud Platform (GCP). This role supports two core

application environments:

This position is responsible for infrastructure reliability, security, performance, operational

maturity, and effective collaboration with internal development teams and external infrastructure

service partners. The ideal candidate is comfortable working across traditional VM-based

environments and modern containerized cloud-native systems, with a strong security mindset

and a practical approach to availability, maintainability, and continuous improvement.

Key Responsibilities

Cloud Infrastructure and Operations

Security and Compliance

Legacy platform: PHP application running on virtual machines with Apache and MySQL

Modern platform: JavaScript / FHIR-based application using PostgreSQL and Kubernetes

Administer, maintain, and improve GCP-based infrastructure for both legacy and modern

application stacks

Manage compute, networking, storage, IAM, secrets, logging, monitoring, backup, and

disaster recovery capabilities

Maintain and optimize VM-based application environments, including Apache, PHP, MySQL,

Linux systems, and supporting services

Support and operate Kubernetes-based environments for modern applications, including

cluster health, deployments, scaling, ingress, observability, and platform stability

Maintain CI/CD and operational workflows that support reliable application delivery across

environments

Monitor system health, performance, availability, and capacity, and proactively address risks

and bottlenecks

Participate in incident response, root cause analysis, and remediation planning

Help design, implement, and enforce security best practices across infrastructure,

platforms, and operational processes

Collaboration and Platform Support

Required Qualifications

Harden systems and services, manage patching processes, and reduce infrastructure risk

exposure

Maintain secure IAM, access controls, secrets handling, certificate management, and

network segmentation

Partner with development teams and service providers to improve secure deployment

patterns and operational controls

Support audit, compliance, vulnerability remediation, logging, and evidence-gathering

processes as needed

Continuously evaluate infrastructure and application architecture for security improvements

Work closely with software development teams to support application delivery,

troubleshooting, performance, and operational readiness

Serve as a bridge between engineering, operations, security, and external infrastructure

partners

Coordinate with third-party service providers, cloud partners, and infrastructure vendors on

implementation, troubleshooting, and operational improvements

Contribute to infrastructure standards, documentation, runbooks, and operational processes

Help guide architecture decisions with a focus on reliability, security, scalability, and

supportability

Strong hands-on experience administering production systems in Google Cloud Platform

Experience supporting Linux-based web application environments

Strong experience with one or more of the following:

Apache / PHP / MySQL on VMs

Kubernetes-based application platforms

PostgreSQL administration in application environments

Experience with cloud networking, firewalls, IAM, service accounts, DNS, TLS/certificates,

load balancing, and backup/recovery

Strong understanding of infrastructure security principles and operational hardening

Experience with monitoring, logging, alerting, and incident response

Experience working directly with software engineers and technical vendors / service

partners

Strong troubleshooting, documentation, and communication skills

This description is intended to describe the general nature and level of work being performed. It is not an exhaustive list of all duties, responsibilities, and requirements. Other functions may be assigned, and management retains the right to add to or change the duties and responsibilities at any time.