AI-Native Platform Engineer - DevOps, Security & Compliance | Zenara Health

• Description
• AI-Native Platform Engineer — DevOps, Security & Compliance, Mid to Senior | Zenara Health
• Location: Remote - India
• Type: Full-time

Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST , overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.

• Commitment: Approximately 50 hours per week
• Industry: Healthcare technology experience is preferred but not mandatory

About the Company

Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We work with sensitive healthcare data, so reliability, security, access control, backups, and compliance are not side concerns — they are part of the product ..

We are a startup, not a department. We move quickly, but we need to move with discipline because customers and patient data depend on us.

About the Role

• We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations.
• This is not a narrow DevOps ticket role.
• This is not a compliance paperwork role.
• This is a hands-on platform ownership role.

Today, platform, security, and compliance work is spread across people who are already covering other responsibilities. We need one full-time owner who keeps systems running, backed up, updated, monitored, secure, and HIPAA-ready ..

You will work closely with the Head of Engineering and a part-time senior security and compliance consultant ..

Here is the test: can you prove that backups restore, deployments roll back, secrets are controlled, alerts work, access is locked down, and compliance evidence exists before a customer asks for it?

We are looking for a calm, methodical operator who automates the boring things, finds the scary things, and closes the important gaps.

Our Platform Vision

We are building an AI-native healthcare software company. That means our platform must support speed without creating unacceptable risk.

The platform should make the safe path the easy path: reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.

You will help build this operating system, including:

• Deployment and rollback workflows
• Monitoring and alerting
• Backups and restore verification
• Secrets and access management
• Cloud configuration reviews
• Security checks on new code and infrastructure
• HIPAA compliance evidence
• Vendor and AI-tool risk tracking
• Daily automated security and compliance checks
• Incident response basics
• Platform documentation and runbooks
• The goal is to create a platform that lets a small engineering team move fast without gambling with production or patient data.

What You’ll Do

• Own production platform operations: deployments, monitoring, alerts, updates, and reliability.
• Own backups and regularly prove restores work .
• Manage access control, secrets, cloud configuration, and security checks.
• Organize HIPAA-related policies, controls, audit evidence, and customer security documentation .
• Identify, prioritize, and close platform and security gaps.
• Build a daily security and compliance agent that sweeps systems and reports findings .
• Work weekly with a senior security and compliance consultant.
• Create runbooks, checklists, and automation for repeatable operational work.
• Support incident response, recovery, and prevention.
• Help free other team members from ad hoc platform and security work.

What We’re Looking For

• Hands-on experience keeping startup systems and platforms running.
• Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.
• Experience with access control, secrets management, cloud configuration, and security basics.
• Ability to prove backups restore and systems recover.
• Ability to code and automate routine platform or security tasks.
• Comfort using AI agents to build automation and operational workflows.
• Calm judgment during incidents and production issues.
• Strong ownership and documentation habits.
• Practical mindset: you can prioritize risks rather than create endless theoretical lists.

Our Current Stack

Azure AKS / Kubernetes

Azure Blob Storage

• Azure Monitor / OpenTelemetry
• Terraform
• Helm
• CI pipelines
• PostgreSQL
• Redis
• Some AWS
• TypeScript applications using Node.js / Hono and React
• Medplum / FHIR
• Healthcare data, HIPAA, patient-data protection, vendor risk, and AI-tool risk

What “AI-Native Platform Engineering” Means for This Role

For this role, being AI-native means you can:

• Use agents to inspect configurations, draft runbooks, and automate checks.
• Build recurring security and compliance sweeps.
• Use AI to accelerate infrastructure review without blindly trusting it.
• Create workflows that surface risks before humans remember to check.
• Automate operational evidence gathering.
• Maintain human approval for sensitive actions.
• Keep permissions, secrets, and production access tightly controlled.
• AI should help you create a more reliable platform, not become another unmanaged risk.

Nice to Have

• Healthcare or HIPAA experience.
• Security background, such as cloud security, SOC, or incident response.
• Compliance framework experience, especially HIPAA or SOC 2.
• Azure and AKS production experience.
• Kubernetes at production scale .

What Success Looks Like

In your first 30 days, you will review the current setup, agree the top platform and security gaps, demonstrate a backup restore and deployment rollback, and produce a prioritized improvement list ..

Within your first 90 days, monitoring and alerting will be in place, top security gaps will be closed, the first version of the daily security/compliance agent will be running, and compliance evidence will be organized ..

Over time, success means Zenara has a reliable, secure, HIPAA-ready platform, clean customer security reviews, and platform work no longer depends on non-specialists.

Schedule

Live collaboration requires overlap with the US team. For engineering roles, the current collaboration window is approximately 6:00 PM to 12:00 AM IST , though final expectations should be confirmed during the hiring process.

Production incidents and critical deployments may occasionally require availability outside normal collaboration windows.

Compensation and Benefits

• Competitive compensation, based on demonstrated ability and experience
• Fully remote work
• Equipment allowance
• Direct access to the founder and Head of Engineering
• Support from a senior security expert

Who Will Thrive in This Role

This role is well suited to someone who:

• Is calm, methodical, and reliable.
• Likes automating operational work.
• Cares about security but can still move pragmatically.
• Wants broad ownership across DevOps, security, and compliance.
• Can operate independently without a large platform team.
• Understands that healthcare data requires discipline.

You may struggle if you want a large ops team around you, only want one narrow specialty, treat compliance as paperwork only, cannot automate, or are careless with secrets and access.

• If you want to build the operating foundation for an AI-native health-tech company, we would love to hear from you.
• Originally posted on Himalayas