ABOUT THE COMPANY & CONTEXT

Bellagio Medical is building two parallel clinical platforms that handle Protected Health Information across 15+ medical facilities and nursing homes. The infrastructure must be HIPAA-compliant, audit-ready, and capable of surviving venture due diligence and federal review. You will personally build and own the security architecture that makes both tracks possible -- no outsourced compliance, no managed security team, just you owning the entire stack.

YOUR MISSION

Build the infrastructure layer that both tracks run on. Provision the environments, harden the pipelines, enforce the security controls, and make sure every piece of PHI that moves through this system is encrypted, logged, and protected. You architect it, you configure it, and you maintain it at the pace both tracks demand -- which means you move fast without cutting corners that could cost us an audit or a breach.

WHAT YOU'LL BUILD

- Provision and maintain isolated VPCs, containerized deployments (Docker, Kubernetes), and network segmentation for both Track 1 and Track 2 -- you write the IaC, you own the drift.
- Configure secure reverse proxies (Traefik/Nginx) with egress and ingress filtering yourself -- you define the rules, you test them, you close the gaps.
- Implement Row-Level Security in PostgreSQL, AES-256 encryption at rest, and immutable audit logging across all database interactions -- written by you, not ticketed to someone else.
- Use AI tools (Cursor, Claude, Copilot) to write Terraform, Helm charts, and security automation scripts at speed -- you generate fast and you review every line before it touches production.
- Build CI/CD pipelines with embedded security gates: SAST, dependency scanning, secrets detection -- you set up the tooling, you triage the alerts, you reduce false positives to something manageable.
- Own IAM across the full platform -- zero-trust policies, MFA, role definitions, and privileged access management,



built and maintained by you.
- Prepare and own the technical evidence for HIPAA compliance audits -- you know what auditors actually look for and you build to that standard from day one.

WHAT WE'RE LOOKING FOR

- You have personally designed and implemented HIPAA-compliant infrastructure from scratch -- you wrote the IaC, configured the encryption, and built the audit logging yourself.
- Deep Linux administration and Kubernetes expertise -- you can trace a packet through a cluster, write a network policy, and debug a failing webhook without help.
- Speed matters here -- both tracks are moving fast and infrastructure cannot be the bottleneck. You provision, configure, and ship environments at the pace the engineering team needs.
- Accuracy is equally non-negotiable -- a misconfigured security group or a missed audit log in a HIPAA workplace is a federal compliance failure, not a minor incident.
- You have built CI/CD pipelines where security was your own design -- you chose the tools, tuned the thresholds, and owned the outcomes.
- You have been the technical owner in a HIPAA or SOC 2 audit -- you prepared the evidence, you answered the questions, and you know what actually matters versus what looks good on paper.
- You have implemented encryption at rest, in transit, and in use in production -- all three, personally, with documentation.

WHO YOU ARE

- You threat-model by default -- you notice the security implication in a design decision before anyone else does, and you say something.
- You make security understandable to engineers who are not security specialists -- you educate, you do not gatekeep.
- Zero tolerance for security theater -- you push back on checkbox compliance that does not actually reduce risk.
- You write the post-mortem without assigning blame and you personally fix the process so it cannot happen again.

Standard cover letters will be ignored.

Pay: ₹74,716.80 - ₹93,396.00 per month

Work Location: In person

📌 Cloud Infrastructure & Security Enginee (Delhi)
🏢 HR Staffing
📍 Delhi