AI-Native Platform Engineer - DevOps, Security & Compliance | Zenara Health

Description

**AI-Native Platform Engineer — DevOps, Security & Compliance, Mid to Senior Zenara Health**

Location: Remote - India

Type: Full-time

Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST, overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.

Commitment: Approximately 50 hours per week

Industry: Healthcare technology experience is preferred but not mandatory

About the Company

Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We work with sensitive healthcare data, so reliability, security, access control, backups, and compliance are not side concerns — they are part of the product ..

We are a startup, not a department. We move quickly, but we need to move with discipline because customers and patient data depend on us.

About the Role

We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations.

This is not a narrow DevOps ticket role.

This is not a compliance paperwork role.

This is a hands-on platform ownership role.

Today, platform, security, and compliance work is spread across people who are already covering other responsibilities. We need one full-time owner who keeps systems running, backed up, updated, monitored, secure, and HIPAA-ready ..

You will work closely with the Head of Engineering and a part-time senior security and compliance consultant ..

Here is the test: can you prove that backups restore, deployments roll back, secrets are controlled, alerts work, access is locked down, and compliance evidence exists before a customer asks for it?

We are looking for a calm, methodical operator who automates the boring things, finds the scary things, and closes the important gaps.

Our Platform Vision

We are building an AI-native healthcare software company. That means our platform must support speed without creating unacceptable risk.

The platform should make the safe path the easy path: reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.

You will help build this operating system, including:

• Deployment and rollback workflows
• Monitoring and alerting
• Backups and restore verification
• Secrets and access management
• Cloud configuration reviews
• Security checks on new code and infrastructure
• HIPAA compliance evidence
• Vendor and AI-tool risk tracking
• Daily automated security and compliance checks
• Incident response basics
• Platform documentation and runbooks

The goal is to create a platform that lets a small engineering team move fast without gambling with production or patient data.

What You’ll Do

• Own production platform operations: deployments, monitoring, alerts, updates, and reliability.
• Own backups and regularly prove restores work .
• Manage access control, secrets, cloud configuration, and security checks.
• Organize HIPAA-related policies, controls, audit evidence, and customer security documentation .
• Identify, prioritize, and close platform and security gaps.
• Build a daily security and compliance agent that sweeps systems and reports findings .
• Work weekly with a senior security and compliance consultant.
• Create runbooks, checklists, and automation for repeatable operational work.
• Support incident response, recovery, and prevention.
• Help free other team members from ad hoc platform and security work.

What We’re Looking For

• Hands-on experience keeping startup systems and platforms running.
• Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.
• Experience with access control, secrets management, cloud configuration, and security basics.
• Ability to prove backups restore and systems recover.
• Ability to code and automate routine platform or security tasks.
• Comfort using AI agents to build automation and operational workflows.
• Calm judgment during incidents and production issues.
• Strong ownership and documentation habits.
• Practical mindset: you can prioritize risks rather than create endless theoretical lists.

Our Current Stack

• Azure AKS / Kubernetes
• Azure Blob Storage
• Azure Monitor / OpenTelemetry
• Terraform
• Helm
• CI pipelines
• PostgreSQL
• Redis
• Some AWS
• TypeScript appli…