Job: Senior DevOps Engineer (SOC2 / HIPAA Compliance)
Location: Hyderabad India (Remote)
Duration: 3 Months (Contract)
Experience Required: 6 Years
About the Role
We are seeking a highly skilled and experienced Senior DevOps Engineer for a critical 3-month contract engagement. The primary objective of this role is to harden our existing cloud infrastructure and drive the technical implementation required to achieve and maintain SOC2 and/or HIPAA compliance. You will work closely with our engineering security and leadership teams to ensure our systems meet strict regulatory standards without sacrificing deployment velocity.
Key Responsibilities:
Compliance Implementation: Architect implement and document security controls policies and procedures required for SOC2 Type I/II and/or HIPAA compliance.
Infrastructure Security: Harden cloud infrastructure (AWS/Azure/GCP) by implementing strict IAM roles least-privilege access network segregation (VPCs Subnets) and encryption at rest and in transit.
Audit & Logging: Centralize and configure monitoring alerting and logging systems (e.g. CloudTrail Datadog ELK) to ensure full auditability of system access and modifications.
DevSecOps Pipeline: Integrate automated security testing (SAST DAST dependency scanning) and compliance checks into existing CI/CD pipelines.
Vulnerability Management: Conduct infrastructure vulnerability assessments and patch management protocols to ensure continuous compliance.
Documentation: Assist in generating technical evidence and runbooks for external auditors.
Requirements
Required Qualifications & Experience
Experience: 6 years of hands-on experience in DevOps Cloud Engineering or Site Reliability Engineering (SRE).
Compliance Expertise: Proven hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA. You must know what auditors look for technically.
Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS GCP or Azure).
Infrastructure as Code (IaC): Strong proficiency with Terraform CloudFormation or Ansible for reproducible compliant infrastructure provisioning.
Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
CI/CD: Extensive experience with CI/CD tools (GitLab CI GitHub Actions Jenkins) and integrating security gates.
Nice to Have
Relevant security certifications (e.g. AWS Certified Security - Specialty CISA CISSP or
CompTIA Security).
Previous experience in the healthcare tech (HealthTech) or FinTech sectors.
Experience using compliance automation platforms (e.g. Vanta Drata Secureframe).
Required Skills:
Required Qualifications & Experience Experience: 6 years of hands-on experience in DevOps Cloud Engineering or Site Reliability Engineering (SRE). Compliance Expertise: Proven hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA. You must know what auditors look for technically. Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS GCP or Azure). Infrastructure as Code (IaC): Strong proficiency with Terraform CloudFormation or Ansible for reproducible compliant infrastructure provisioning. Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters. CI/CD: Extensive experience with CI/CD tools (GitLab CI GitHub Actions Jenkins) and integrating security gates. Nice to Have Relevant security certifications (e.g. AWS Certified Security - Specialty CISA CISSP or CompTIA Security). Previous experience in the healthcare tech (HealthTech) or FinTech sectors. Experience using compliance automation platforms (e.g. Vanta Drata Secureframe).
Required Education:
Educational Background: Bachelors or Masters degree in computer science Software Engineering or a strictly related technical field.