Overview

Job: Senior DevOps Engineer (SOC2 / HIPAA Compliance)

Responsibilities

• Compliance Implementation: Architect, implement, and document security controls, policies, and procedures required for SOC2 Type I/II and/or HIPAA compliance.
• Infrastructure Security: Harden cloud infrastructure (AWS/Azure/GCP) by implementing strict IAM roles, least-privilege access, network segregation (VPCs, Subnets), and encryption at rest and in transit.
• Audit & Logging: Centralize and configure monitoring, alerting, and logging systems (e.g., CloudTrail, Datadog, ELK) to ensure full auditability of system access and modifications.
• DevSecOps Pipeline: Integrate automated security testing (SAST, DAST, dependency scanning) and compliance checks into existing CI/CD pipelines.
• Vulnerability Management: Conduct infrastructure vulnerability assessments and patch management protocols to ensure continuous compliance.
• Documentation: Assist in generating technical evidence and runbooks for external auditors.

Qualifications

• About the Role
• We are seeking a highly skilled and experienced Senior DevOps Engineer for a critical 3-month contract engagement. The primary objective of this role is to harden our existing cloud infrastructure and drive the technical implementation required to achieve and maintain SOC2 and/or HIPAA compliance. You will work closely with our engineering, security, and leadership teams to ensure our systems meet strict regulatory standards without sacrificing deployment velocity.
• Compliance Expertise: Proven, hands-on experience leading or actively participating in technical infrastructure audits for SOC2 or HIPAA. You must know what auditors look for technically.
• Cloud Platforms: Deep expertise in managing and securing public cloud environments (AWS, GCP, or Azure).
• Infrastructure as Code (IaC): Strong proficiency with Terraform, CloudFormation, or Ansible for reproducible, compliant infrastructure provisioning.
• Containers & Orchestration: Experience securing Docker containers and Kubernetes clusters.
• CI/CD: Extensive experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins) and integrating security gates.

Nice to have

• Relevant security certifications (e.g., AWS Certified Security - Specialty, CISA, CISSP, or
• CompTIA Security+).
• Previous experience in the healthcare tech (HealthTech) or FinTech sectors.