Meridian Health featured image
← All work
Healthcare · Managed operations · Compliance · Monitoring

Taking a healthcare platform from firefighting to boring

Executive summary: Meridian Health runs patient portals for regional clinic networks. Operations lived in spreadsheets and late-night heroics, and audits were an annual crisis. Opsnexus took over operations under a hard SLA, automated patching and recovery, and eliminated 20 hours of weekly manual work. Uptime since: 99.98%.

99.98%uptime under SLA
20 h/wkmanual work eliminated
100%audit checks passed

Client background

Meridian Health serves 60+ clinic networks with patient scheduling and records portals. A five-person engineering team split its time between product work and keeping roughly 80 servers alive.

The challenge

There was no on-call rotation — outages were discovered via support tickets, sometimes hours in. Patching happened quarterly at best, which security questionnaires increasingly flagged. The team's best engineer spent most of his time on operations, and the annual compliance audit consumed a month of scrambling.

What discovery found

!Mean time to detect an outage was 47 minutes; detection came from customers, not monitoring.
!31 of 80 servers were more than 90 days behind on security patches.
!Backups existed but a restore had never been tested end-to-end.
!About 20 hours a week of engineering time went to manual operational chores.

The solution

We took operational ownership under a written SLA with 15-minute acknowledgment. Monitoring and alerting were rebuilt on Prometheus and Grafana with an actual escalation path. Patching, certificate renewal, and backup verification were automated with Ansible; restores are now drilled quarterly. Every incident produces a written post-mortem, and every recurring task becomes a runbook in Meridian's own wiki.

Implementation

Wks 1–3
Stabilize
Monitoring on every host, on-call rotation live, worst patch gaps closed under emergency change control.
Wks 4–8
Automate
Ansible-driven patching and hardening, automated certificate management, verified backup and restore pipeline.
Wks 9–12
Compliance groundwork
Access controls, audit logging, and evidence collection aligned to the auditor's checklist — continuously, not annually.
Ongoing
Operate & review
24/7 monitoring and response under SLA; quarterly reliability, capacity, and cost reviews with leadership.

Results

99.98% measured uptime across 18 months under SLA — zero missed response targets.
Mean time to detect dropped from 47 minutes to under 2; customers no longer report outages first.
Roughly 20 hours of weekly manual work eliminated, returned to product development.
Every compliance audit since engagement passed with zero critical findings.
Quarterly restore drills completed successfully — recovery is now a procedure, not a hope.
Ops used to eat a third of our roadmap. Opsnexus took the pager, wrote the runbooks, and gave us the time back. Audits went from panic to routine.
A. RoviraHead of Product, Meridian Health