About the role

Thatch is rewiring how health benefits work. We build software that gives employees real control over how they use their benefits.

We’re looking for an Infrastructure Engineer to own the reliability, security, and performance of the platform that powers Thatch. Every product team depends on the infrastructure you design and operate.

Our platform runs in a HIPAA-compliant environment and handles sensitive healthcare data. Reliability and security are foundational. The systems you build must be secure, observable, and resilient under real-world load.

We organize engineering around product teams that serve members, employers, and partners. The Infrastructure team builds and operates the platform that enables them to ship reliably.

What you will do

• Own infrastructure health, performance, and reliability across the stack.
• Make architectural decisions and improve how we build and operate.
• Design and evolve infrastructure using Terraform.
• Improve CI/CD, deployments, and developer workflows so teams ship faster.
• Strengthen security across access controls, vulnerability management, and dependencies.
• Identify and eliminate reliability risks before they impact customers.

What we are looking for

• Experience operating production infrastructure, platform, DevOps, or SRE systems.
• A track record of owning critical systems end-to-end.
• Strong experience with PostgreSQL or comparable relational databases in production.
• Experience managing infrastructure as code using Terraform.
• Sound judgment across reliability, performance, and security tradeoffs.
• A bias toward automation and improving developer productivity.

We hire engineers across multiple levels and care most about the scope you’ve owned, the impact you’ve had, and how you make decisions.

Tools and tech stack

• Ruby on Rails
• PostgreSQL
• Terraform
• Modern cloud infrastructure and CI/CD tooling

You don’t need experience with every tool above. You do need to be able to operate systems responsibly in a regulated environment.

Experience that stands out

• Experience operating in HIPAA or SOC 2 environments.
• Deep PostgreSQL performance tuning or replication management.
• Building internal tooling that improves developer productivity.
• Improving observability, incident response, or overall security posture.

What to expect

We aim to move quickly, and most candidates complete the process within 2–3 weeks. The interview process typically includes:

• An initial conversation with a recruiter.
• A collaborative pair programming session.
• A systems or infrastructure design discussion.
• A conversation with members of the engineering team.
• A final conversation with engineering and company leadership.