AI-Native Platform Engineer - DevOps, Security & Compliance | Zenara Health

Description

AI-Native Platform Engineer — DevOps, Security & Compliance, Mid to Senior | Zenara Health

Location: Remote - India

Type: Full-time

Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST, overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.

Commitment: Approximately 50 hours per week

Industry: Healthcare technology experience is preferred but not mandatory

About the Company

Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We work with sensitive healthcare data, so reliability, security, access control, backups, and compliance are not side concerns — they are part of the product ..

We are a startup, not a department. We move quickly, but we need to move with discipline because customers and patient data depend on us.

About the Role

We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations.

This is not a narrow DevOps ticket role.

This is not a compliance paperwork role.

This is a hands-on platform ownership role.

Today, platform, security, and compliance work is spread across people who are already covering other responsibilities. We need one full-time owner who keeps systems running, backed up, updated, monitored, secure, and HIPAA-ready ..

You will work closely with the Head of Engineering and a part-time senior security and compliance consultant ..

Here is the test: can you prove that backups restore, deployments roll back, secrets are controlled, alerts work, access is locked down, and compliance evidence exists before a customer asks for it?

We are looking for a calm, methodical operator who automates the boring things, finds the scary things, and closes the important gaps.

Our Platform Vision

We are building an AI-native healthcare software company. That means our platform must support speed without creating unacceptable risk.

The platform should make the safe path the easy path: reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.

You will help build this operating system, including:

• Deployment and rollback workflows
• Monitoring and alerting
• Backups and restore verification
• Secrets and access management
• Cloud configuration reviews
• Security checks on new code and infrastructure
• HIPAA compliance evidence
• Vendor and AI-tool risk tracking
• Daily automated security and compliance checks
• Incident response basics
• Platform documentation and runbooks

The goal is to create a platform that lets a small engineering team move fast without gambling with production or patient data.

What You’ll Do

• Own production platform operations: deployments, monitoring, alerts, updates, and reliability.
• Own backups and regularly prove restores work .
• Manage access control, secrets, cloud configuration, and security checks.
• Organize HIPAA-related policies, controls, audit evidence, and customer security documentation .
• Identify, prioritize, and close platform and security gaps.
• Build a daily security and compliance agent that sweeps systems and reports findings .
• Work weekly with a senior security and compliance consultant.
• Create runbooks, checklists, and automation for repeatable operational work.
• Support incident response, recovery, and prevention.
• Help free other team members from ad hoc platform and security work.

What We’re Looking For

• Hands-on experience keeping startup systems and platforms running.
• Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.
• Experience with access control, secrets management, cloud configuration, and security basics.
• Ability to prove backups restore and systems recover.
• Ability to code and automate routine platform or security tasks.
• Comfort using AI agents to build automation and operational workflows.
• Calm judgment during incidents and production issues.
• Strong ownership and documentation habits.
• Practical mindset: you can prioritize risks rather than create endless theoretical lists.

Our Current Stack

• Azure AKS / Kubernetes
• Azure Blob Storage
• Azure Monitor / OpenTelemetry
• Terraform
• Helm
• CI pipelines
• PostgreSQL
• Redis
• Some AWS
• TypeScript applications using Node.js / Hono and React
• Medplum / FHIR
• Healthcare data, HIPAA, patient-data protection, vendor risk, and AI-tool risk

What “AI-Native Platform Engineering” Means for This Role

For this role, being AI-native means you can:

• Use agents to inspect configurations, draft runbooks, and automate checks.
• Build recurring security and compliance sweeps.
• Use AI to accelerate infrastructure review without blindly trusting it.
• Create workflows that surface risks before humans remember to check.
• Automate operational evidence gathering.
• Maintain human approval for sensitive actions.
• Keep permissions, secrets, and production access tightly controlled.
• AI should help you create a more reliable platform, not become another unmanaged risk.

Nice to Have

• Healthcare or HIPAA experience.
• Security background, such as cloud security, SOC, or incident response.
• Compliance framework experience, especially HIPAA or SOC 2.
• Azure and AKS production experience.
• Kubernetes at production scale .

What Success Looks Like

In your first 30 days, you will review the current setup, agree the top platform and security gaps, demonstrate a backup restore and deployment rollback, and produce a prioritized improvement list ..

Within your first 90 days, monitoring and alerting will be in place, top security gaps will be closed, the first version of the daily security/compliance agent will be running, and compliance evidence will be organized ..

Over time, success means Zenara has a reliable, secure, HIPAA-ready platform, clean customer security reviews, and platform work no longer depends on non-specialists.

Schedule

Live collaboration requires overlap with the US team. For engineering roles, the current collaboration window is approximately 6:00 PM to 12:00 AM IST, though final expectations should be confirmed during the hiring process.

Production incidents and critical deployments may occasionally require availability outside normal collaboration windows.

Compensation and Benefits

• Competitive compensation, based on demonstrated ability and experience
• Fully remote work
• Equipment allowance
• Direct access to the founder and Head of Engineering
• Support from a senior security expert

Who Will Thrive in This Role

This role is well suited to someone who:

• Is calm, methodical, and reliable.
• Likes automating operational work.
• Cares about security but can still move pragmatically.
• Wants broad ownership across DevOps, security, and compliance.
• Can operate independently without a large platform team.
• Understands that healthcare data requires discipline.

You may struggle if you want a large ops team around you, only want one narrow specialty, treat compliance as paperwork only, cannot automate, or are careless with secrets and access.

If you want to build the operating foundation for an AI-native health-tech company, we would love to hear from you.