AI-Native Platform Engineer - DevOps, Security & Compliance |

Description

AI-Native Platform Engineer — DevOps, Security & Compliance, Mid to Senior | Zenara Health

Location

Remote - India

Type

Full-time

Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST, overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.

Commitment

Approximately 50 hours per week

Industry

Healthcare technology experience is preferred but not mandatory

About the Company

Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We work with sensitive healthcare data, so reliability, security, access control, backups, and compliance are not side concerns — they are part of the product ..

We are a startup, not a department. We move quickly, but we need to move with discipline because customers and patient data depend on us.

About the Role

We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations.

This is not a narrow DevOps ticket role.

This is not a compliance paperwork role.

This is a hands-on platform ownership role.

Today, platform, security, and compliance work is spread across people who are already covering other responsibilities. We need one full-time owner who keeps systems running, backed up, updated, monitored, secure, and HIPAA-ready ..

You will work closely with the Head of Engineering and a part-time senior security and compliance consultant ..

Here is the test: can you prove that backups restore, deployments roll back, secrets are controlled, alerts work, access is locked down, and compliance evidence exists before a customer asks for it?

We are looking for a calm, methodical operator who automates the boring things, finds the scary things, and closes the important gaps.

Our Platform Vision

We are building an AI-native healthcare software company. That means our platform must support speed without creating unacceptable risk.

The platform should make the safe path the easy path: reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.

You will help build this operating system, including

Deployment and rollback workflows

Monitoring and alerting

Backups and restore verification

Secrets and access management

Cloud configuration reviews

Security checks on new code and infrastructure

HIPAA compliance evidence

Vendor and AI-tool risk tracking

Daily automated security and compliance checks

Incident response basics

Platform documentation and runbooks

The goal is to create a platform that lets a small engineering team move fast without gambling with production or patient data.

What You’ll Do

Own production platform operations: deployments, monitoring, alerts, updates, and reliability.

Own backups and regularly prove restores work .

Manage access control, secrets, cloud configuration, and security checks.

Organize HIPAA-related policies, controls, audit evidence, and customer security documentation .

Identify, prioritize, and close platform and security gaps.

Build a daily security and compliance agent that sweeps systems and reports findings .

Work weekly with a senior security and compliance consultant.

Create runbooks, checklists, and automation for repeatable operational work.

Support incident response, recovery, and prevention.

Help free other team members from ad hoc platform and security work.

What We’re Looking For

Hands-on experience keeping startup systems and platforms running.

Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.

Experience with access control, secrets management, cloud configuration, and security basics.

Ability to prove backups restore and systems recover.

Ability to code and automate routine platform or security tasks.

Comfort using AI agents to build automation and operational workflows.

Calm judgment during incidents and production issues.

Strong ownership and documentation habits.

Practical mindset

you can prioritize risks rather than create endless theoretical lists.

Our Current Stack

Azure AKS / Kubernetes

Azure Blob Storage

Azure Monitor / OpenTelemetry

Terraform

Helm

CI pipelines

PostgreSQL

Redis

Some AWS

TypeScript applications using Node.js / Hono and React

Medplum / FHIR

Healthcare data, HIPAA, patient-data protection, vendor risk, and AI-tool risk

What “AI-Native Platform Engineering” Means for This Role

For this role, being AI-native means you can

Use agents to inspect configurations, draft runbooks, and automate checks.

Build recurring security and compliance sweeps.

Use AI to accelerate infrastructure review without blindly trusting it.

Create workflows that surface risks before humans remember to check.

Automate operational evidence gathering.

Maintain human approval for sensitive actions.

Keep permissions, secrets, and production access tightly controlled.

AI should help you create a more reliable platform, not become another unmanaged risk.

Nice to Have

Healthcare or HIPAA experience.

Security background, such as cloud security, SOC, or incident response.

Compliance framework experience, especially HIPAA or SOC 2.

Azure and AKS production experience.

Kubernetes at production scale .

What Success Looks Like

In your first 30 days, you will review the current setup, agree the top platform and security gaps, demonstrate a backup restore and deployment rollback, and produce a prioritized improvement list ..

Within your first 90 days, monitoring and alerting will be in place, top security gaps will be closed, the first version of the daily security/compliance agent will be running, and compliance evidence will be organized ..

Over time, success means Zenara has a reliable, secure, HIPAA-ready platform, clean customer security reviews, and platform work no longer depends on non-spec