Job Description
Job: Senior Dev Ops Engineer (SOC2 / HIPAA Compliance)
Location: Hyderabad, India (Remote)
Duration: 3 Months (Contract)
Experience Required: 6+ Years
About the Role
We are seeking a highly skilled and experienced Senior Dev Ops Engineer for a critical 3-month contract engagement. The primary objective of this role is to harden our existing cloud infrastructure and drive the technical implementation required to achieve and maintain SOC2 and/or HIPAA compliance. You will work closely with our engineering, security, and leadership teams to ensure our systems meet strict regulatory standards without sacrificing deployment velocity.
Key Responsibilities:
Compliance Implementation: Architect, implement, and document security controls, policies, and procedures required for SOC2 Type I/II and/or HIPAA compliance.
Infrastructure Security: Harden cloud infrastructure (AWS/Azure/GCP) by implementing strict IAM roles, least-privilege access, network segregation (VPCs, Subnets), and encryption at rest and in transit.
Audit & Logging: Centralize and configure monitoring, alerting, and logging systems (e.g., Cloud Trail, Datadog, ELK) to ensure full auditability of system access and modifications.
Dev SecOps Pipeline: Integrate automated security testing (SAST, DAST, dependency scanning) and compliance checks into existing CI/CD pipelines.
Vulnerability Management: Conduct infrastructure vulnerability assessments and patch management protocols to ensure continuous compliance.
Documentation: Assist in generating technical evidence and runbooks for external auditors.
RequirementsRequired Qualifications & Experience
Experience: 6+ years of hands-on experience in Dev Ops, Cloud Engineering, or Site Reliability Engineering (SRE).
Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA.



You must know what auditors look for technically.
Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure).
Infrastructure as Code (IaC): Strong proficiency with Terraform, Cloud Formation, or Ansible for reproducible, compliant infrastructure provisioning.
Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
CI/CD: Extensive experience with CI/CD tools (Git Lab CI, Git Hub Actions, Jenkins) and integrating security gates.
Nice to Have
Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or
CompTIA Security+).
Previous experience in the healthcare tech (Health Tech) or Fin Tech sectors.
Experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).
Requirements
Required Qualifications & Experience Experience: 6+ years of hands-on experience in Dev Ops, Cloud Engineering, or Site Reliability Engineering (SRE). Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA. You must know what auditors look for technically. Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure). Infrastructure as Code (IaC): Solid proficiency with Terraform, Cloud Formation, or Ansible for reproducible, compliant infrastructure provisioning. Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters. CI/CD: Extensive experience with CI/CD tools (Git Lab CI, Git Hub Actions, Jenkins) and integrating security gates. Nice to Have Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or CompTIA Security+). Previous experience in the healthcare tech (Health Tech) or Fin Tech sectors. Experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).

📌 enior DevOps Engineer/ HIPAA Compliance) (India)
🏢 Dhan AI
📍 India