Dhan AI - enior DevOps Engineer (SOC2 / HIPAA Compliance)

DevOps Developer is needed in Hyderabad, India.

Client: Dhan AI

Location: Hyderabad, TG, in

Contract: Contract

Job Description

We are seeking a highly skilled and experienced Senior DevOps Engineer for a critical 3-month contract engagement. The primary objective of this role is to harden our existing cloud infrastructure and drive the technical implementation required to achieve and maintain SOC2 and/or HIPAA compliance. You will work closely with our engineering, security, and leadership teams to ensure our systems meet strict regulatory standards without sacrificing deployment velocity.

Key Responsibilities

• Compliance Implementation: Architect, implement, and document security controls, policies, and procedures required for SOC2 Type I/II and/or HIPAA compliance.
• Infrastructure Security: Harden cloud infrastructure (AWS/Azure/GCP) by implementing strict IAM roles, least-privilege access, network segregation (VPCs, Subnets), and encryption at rest and in transit.
• Audit & Logging: Centralize and configure monitoring, alerting, and logging systems (e.g., CloudTrail, Datadog, ELK) to ensure full auditability of system access and modifications.
• DevSecOps Pipeline: Integrate automated security testing (SAST, DAST, dependency scanning) and compliance checks into existing CI/CD pipelines.
• Vulnerability Management: Conduct infrastructure vulnerability assessments and patch management protocols to ensure continuous compliance.
• Documentation: Assist in generating technical evidence and runbooks for external auditors.

Requirements

Required Qualifications & Experience

• Experience: 6+ years of hands-on experience in DevOps, Cloud Engineering, or Site Reliability Engineering (SRE).
• Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA. You must know what auditors look for technically.
• Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure).
• Infrastructure as Code (IaC): Strong proficiency with Terraform, CloudFormation, or Ansible for reproducible, compliant infrastructure provisioning.
• Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
• CI/CD: Extensive experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins) and integrating security gates.

Nice to Have

• Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or CompTIA Security+).
• Previous experience in the healthcare tech (HealthTech) or FinTech sectors.
• Experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).

Additional Information

Location: Hyderabad, India (Remote)

Duration: 3 Months (Contract)

Experience Required: 6+ Years