Principal Platform Engineer
Impruvon builds software and connected hardware that transforms how care teams manage medications for vulnerable populations. Our platform replaces manual, error-prone workflows with real-time, guided systems that improve safety, reduce risk, and simplify compliance across residential care settings.
We support providers across 20+ states, including intellectual and developmental disabilities (IDD) providers, assisted living operators, and behavioral health programs. Our platform includes a full electronic Medication Administration Record (eMAR) and administrative dashboard, smart connected MedBoxes that control and track medication access, emergency kits for urgent situations, and tools that help residents build independence with self-medication. Our solution has been proven to reduce medication errors by approximately 48%, directly impacting the safety of individuals in care facilities.
We are a high-growth, mission-driven startup solving complex, high-impact problems where reliability, usability, and security matter.
About the Role
We are hiring a Principal Platform Engineer to take ownership of our existing platform infrastructure. Today, our engineering leadership manages AWS, DevOps, and compliance. You will be the primary technical lead for this domain. We are looking for someone who can mature our practices, optimize our workflows, and scale our infrastructure. While you will partner with engineering leadership on strategy, you will be the primary authority on technical implementation. We seek a self-starter who thrives when given a high-level outcome and the freedom to define the technical path to get there.
You will own our AWS footprint end-to-end: a multi-account AWS Organizations setup (currently 3 accounts), our Infrastructure-as-Code repo (AWS CDK), CI/CD (GitHub Actions), containerization and orchestration (ECS, considering EKS), and our developer environment tooling (docker compose, devcontainers, mise). You will be responsible for elevating our security and compliance posture - HIPAA, SOC 2 Type II, and likely upcoming work toward StateRAMP or FedRAMP.
Most of this foundation already exists. This is not a "build it from zero" role - it's a "take a working but under-resourced platform and bring it to the next level" role. We are looking for an experienced engineer who can quickly assess our environment, identify opportunities for improvement, and drive solutions with a high degree of agency. If you thrive in high-growth, mission-driven environments and are eager to tackle complex engineering challenges while maintaining a high technical bar, this role is for you. Key Responsibilities
- Own and evolve our AWS environment across a multi-account AWS Organization structure, including account boundaries, service control policies, cross-account IAM, and cost and security governance.
- Extend and maintain our Infrastructure-as-Code repo (AWS CDK), treating infrastructure changes with the same rigor as application code - reviewed, tested, and versioned.
- Own and improve CI/CD pipelines in GitHub Actions, pushing toward faster, safer, more automated deployments across applications.
- Own our containerization strategy (Docker) and container orchestration platform (currently ECS, potentially moving to EKS) - image standards, base image and dependency security, and day-to-day orchestration operations.
- Maintain and improve our devcontainer setup so engineers get consistent reproducible local development environments.
- Lead the technical work to elevate our compliance and security posture - maintaining and evolving controls for HIPAA and SOC 2 Type II, and leading the technical requirements for StateRAMP/FedRAMP readiness.
- Lead infrastructure-focused security work: secrets management, network security, vulnerability management, and incident response readiness.
- Partner with engineering leadership to evolve our platform strategy and formalize our infrastructure practices as we scale.
- Proactively iden