About CLARA Analytics

CLARA Analytics is the leading AI as a service (AIaaS) provider that improves casualty claims outcomes for commercial insurance carriers and self-insured organizations. The company’s product suite for workers comp, commercial auto and general liability insurance claims applies image recognition, natural language processing, and other AI-based techniques to unlock insights from medical notes, bills and other documents surrounding a claim. CLARA’s customers include companies from the top 25 global insurance carriers to large third-party administrators and self-insured organizations. Founded in 2017, CLARA Analytics is headquartered in California’s Silicon Valley. For more information, visit .

The Role

We’re seeking a DevOps Engineer to cover Eastern Time Zone hours (7am - 3pm ET) and collaborate closely with the Data Engineering and Software Engineering teams under the supervision of the Director of DevOps, Infrastructure, and Security + the company's Chief Agentic & Technology Officer. This role helps to extend and maintain a highly automated, infrastructure-as-code DevOps practice supporting an analytics platform operating in a SOC 2 environment. The DevOps Engineer keeps the AWS and Kubernetes footprint healthy while shipping changes safely through Terraform, Helm, and GitLab pipelines, with a growing emphasis on AI/agentic automation via AWS Bedrock. Success means moving fast without compromising production stability or compliance posture.

What You'll Do

• Build and maintain automated infrastructure workflows in Terraform (IAM, EKS, EMR, Lambda, S3, KMS, RDS, security groups) including modules, remote state, and drift management.
• Own and improve GitLab CI/CD pipelines: automated testing, security scanning, and safe/staged promotion with rollback.
• Manage Kubernetes on EKS via Helm, including GitLab runners with KEDA.
• Support AI/agentic workloads, Bedrock AgentCore runtimes, gateways, memory, and identity; MCP servers; agent deployment and observability.
• Provision and manage AWS Bedrock access (least-privilege IAM, model enablement, cost/usage monitoring).
• Handle access management and change requests within SOC 2 controls — least privilege, auditability, no console drift.