05 Aug
|
Dhan AI
|
Hyderabad
Job: Senior DevOps Engineer (SOC2 / HIPAA Compliance) Location: Hyderabad, India (Remote) Duration: 3 Months (Contract) Experience Required: 6+ Years About the Role We are seeking a highly skilled and experienced Senior DevOps Engineer for a critical 3-month contract engagement.
The primary objective of this role is to harden our existing cloud infrastructure and drive the technical implementation required to achieve and maintain SOC2 and/or HIPAA compliance.
You will work closely with our engineering, security, and leadership teams to ensure our systems meet strict regulatory standards without sacrificing deployment velocity.
Key Responsibilities: Compliance Implementation: Architect, implement, and document security controls, policies, and procedures required for SOC2 Type I/II and/or HIPAA compliance.
Infrastructure Security: Harden cloud infrastructure (AWS/Azure/GCP) by implementing strict IAM roles, least-privilege access, network segregation (VPCs, Subnets), and encryption at rest and in transit.
Audit & Logging: Centralize and configure monitoring, alerting, and logging systems (e.g., CloudTrail, Datadog, ELK) to ensure full auditability of system access and modifications.
DevSecOps Pipeline: Integrate automated security testing (SAST, DAST, dependency scanning) and compliance checks into existing CI/CD pipelines.
Vulnerability Management: Conduct infrastructure vulnerability assessments and patch management protocols to ensure continuous compliance.
Documentation: Assist in generating technical evidence and runbooks for external auditors.
Requirements Required Qualifications & Experience Experience: 6+ years of hands-on experience in DevOps, Cloud Engineering, or Site Reliability Engineering (SRE).
Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA.
You must know what auditors look for technically.
Cloud Platforms:
Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure).
Infrastructure as Code (IaC): Robust proficiency with Terraform, CloudFormation, or Ansible for reproducible, compliant infrastructure provisioning.
Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
CI/CD: Extensive experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins) and integrating security gates.
Nice to Have Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or CompTIA Security+).
Previous experience in the healthcare tech (HealthTech) or FinTech sectors.
Experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).
Educational Background: Bachelor’s or Master’s degree in computer science, Software Engineering, or a strictly related technical field.
5+ years
Required Qualifications & Experience Experience: 6+ years of hands-on experience in DevOps, Cloud Engineering, or Site Reliability Engineering (SRE).
Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA.
You must know what auditors look for technically.
Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure).
Infrastructure as Code (IaC): Strong proficiency with Terraform, CloudFormation, or Ansible for reproducible, compliant infrastructure provisioning.
Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
CI/CD: Extensive experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins) and integrating security gates.
Nice to Have Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or CompTIA Security+).
Previous experience in the healthcare tech (HealthTech) or FinTech sectors.
Experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).
Required Skill Profession
Other General
📌 enior DevOps Engineer/ HIPAA Compliance) (Hyderabad)
🏢 Dhan AI
📍 Hyderabad