Posted today · be early
AI-Native Platform Engineer - DevOps, Security & Compliance | Zenara Health
Zenara Health
IndiaremotePosted 1 day ago
Z
Skill Required
Platform-EngineerDevOps-EngineerCloud-Security-EngineerSite-Reliability-EngineerSecurity-Operations-EngineerSenior-Site-Reliability-Engineer-Healthcare-AISenior-AI-Platform-EngineerAI-ML-Platform-EngineerAI-Platform-Security-ArchitectAI EngineerDevOps EngineerPlatform EngineerSecurity EngineersecurityDevOpsAISOCCloud SecurityObservabilityEngineeringTypeScriptPostgreSQLKubernetesautomationTerraformNode.jsbuildingISO 27001ReactRedisAzureCI/CDCloudHelmAWSandCICDFulltime
Key highlights
- Competitive compensation
- Mid to Senior level experience
- Equipment allowance
- Required overlap 6:00 PM - 12:00 AM IST
- Remote - India
- 50 hours per week commitment
Role overview
Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations in a hands-on platform ownership role, ensuring that the safe path is the easy path for a small engineering team moving quickly with sensitive healthcare data. This role involves building an operating system that supports speed without unacceptable risk, focusing on reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.
Responsibilities
- Own production platform operations: deployments, monitoring, alerts, updates, and reliability.
- Own backups and regularly prove restores work.
- Manage access control, secrets, cloud configuration, and security checks.
- Organize HIPAA-related policies, controls, audit evidence, and customer security documentation.
- Identify, prioritize, and close platform and security gaps.
- Build a daily security and compliance agent that sweeps systems and reports findings.
- Work weekly with a senior security and compliance consultant.
- Create runbooks, checklists, and automation for repeatable operational work.
- Support incident response, recovery, and prevention.
- Help free other team members from ad hoc platform and security work.
- Build deployment and rollback workflows.
- Manage monitoring and alerting.
- Handle backups and restore verification.
- Manage secrets and access management.
- Perform cloud configuration reviews.
- Conduct security checks on new code and infrastructure.
- Manage HIPAA compliance evidence.
- Track vendor and AI-tool risk.
- Perform daily automated security and compliance checks.
- Handle incident response basics.
- Develop platform documentation and runbooks.
- Use agents to inspect configurations, draft runbooks, and automate checks.
- Build recurring security and compliance sweeps.
- Use AI to accelerate infrastructure review without blindly trusting it.
- Create workflows that surface risks before humans remember to check.
- Automate operational evidence gathering.
- Maintain human approval for sensitive actions.
- Keep permissions, secrets, and production access tightly controlled.
Requirements
- Hands-on experience keeping startup systems and platforms running.
- Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.
- Experience with access control, secrets management, cloud configuration, and security basics.
- Ability to prove backups restore and systems recover.
- Ability to code and automate routine platform or security tasks.
- Comfort using AI agents to build automation and operational workflows.
- Calm judgment during incidents and production issues.
- Strong ownership and documentation habits.
- Practical mindset: you can prioritize risks rather than create endless theoretical lists.
Nice to have
- Healthcare or HIPAA experience.
- Security background, such as cloud security, SOC, or incident response.
- Compliance framework experience, especially HIPAA or SOC 2.
- Azure and AKS production experience.
- Kubernetes at production scale.
Benefits
- Competitive compensation, based on demonstrated ability and experience
- Fully remote work
- Equipment allowance
- Direct access to the founder and Head of Engineering
- Support from a senior security expert
Additional details
- Location: Remote - India
- Type: Full-time
- Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST, overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.
- Commitment: Approximately 50 hours per week
- Industry: Healthcare technology experience is preferred but not mandatory
- Current Stack: Azure AKS / Kubernetes, Azure Blob Storage, Azure Monitor / OpenTelemetry, Terraform, Helm, CI pipelines, PostgreSQL, Redis, Some AWS, TypeScript applications using Node.js / Hono and React, Medplum / FHIR, Healthcare data, HIPAA, patient-data protection, vendor risk, and AI-tool risk
- Production incidents and critical deployments may occasionally require availability outside normal collaboration windows.
- Success Metrics (30 days): review the current setup, agree the top platform and security gaps, demonstrate a backup restore and deployment rollback, and produce a prioritized improvement list.
- Success Metrics (90 days): monitoring and alerting will be in place, top security gaps will be closed, the first version of the daily security/compliance agent will be running, and compliance evidence will be organized.
- Success Long-term: Zenara has a reliable, secure, HIPAA-ready platform, clean customer security reviews, and platform work no longer depends on non-specialists.
- Ideal Candidate Profile: Calm, methodical, reliable, likes automating operational work, cares about security but can still move pragmatically, wants broad ownership across DevOps, security, and compliance, can operate independently without a large platform team, understands that healthcare data requires discipline.
- Potential Red Flags: Preferring a large ops team, wanting only one narrow specialty, treating compliance as paperwork only, inability to automate, or being careless with secrets and access.
- Originally posted on Himalayas