AI-Native Platform Engineer - DevOps, Security & Compliance | Zenara Health

About this role

Description
AI-Native Platform Engineer — DevOps, Security & Compliance, Mid to Senior | Zenara Health
Location: Remote - India
Type: Full-time
Working Hours: All meetings and live collaboration happen between approximately 6:00 PM and 12:00 AM IST, overlapping US Pacific Time. Attendance in that window is required. Your remaining work is yours to schedule.
Commitment: Approximately 50 hours per week
Industry: Healthcare technology experience is preferred but not mandatory
About the Company
Zenara Health is a technology-oriented mental healthcare organization building clinical software for behavioral-health clinics. We work with sensitive healthcare data, so reliability, security, access control, backups, and compliance are not side concerns — they are part of the product ..
We are a startup, not a department. We move quickly, but we need to move with discipline because customers and patient data depend on us.
About the Role
We are looking for an AI-Native Platform Engineer to own DevOps, production reliability, security operations, and compliance foundations.
This is not a narrow DevOps ticket role.
This is not a compliance paperwork role.
This is a hands-on platform ownership role.
Today, platform, security, and compliance work is spread across people who are already covering other responsibilities. We need one full-time owner who keeps systems running, backed up, updated, monitored, secure, and HIPAA-ready ..
You will work closely with the Head of Engineering and a part-time senior security and compliance consultant ..
Here is the test: can you prove that backups restore, deployments roll back, secrets are controlled, alerts work, access is locked down, and compliance evidence exists before a customer asks for it?
We are looking for a calm, methodical operator who automates the boring things, finds the scary things, and closes the important gaps.
Our Platform Vision
We are building an AI-native healthcare software company. That means our platform must support speed without creating unacceptable risk.
The platform should make the safe path the easy path: reliable deployments, observable systems, tested recovery, controlled access, documented evidence, automated checks, and continuous security awareness.
You will help build this operating system, including:

• Deployment and rollback workflows

• Monitoring and alerting

• Backups and restore verification

• Secrets and access management

• Cloud configuration reviews

• Security checks on new code and infrastructure

• HIPAA compliance evidence

• Vendor and AI-tool risk tracking

• Daily automated security and compliance checks

• Incident response basics

• Platform documentation and runbooks

The goal is to create a platform that lets a small engineering team move fast without gambling with production or patient data.
What You’ll Do

• Own production platform operations: deployments, monitoring, alerts, updates, and reliability.

• Own backups and regularly prove restores work .

• Manage access control, secrets, cloud configuration, and security checks.

• Organize HIPAA-related policies, controls, audit evidence, and customer security documentation .

• Identify, prioritize, and close platform and security gaps.

• Build a daily security and compliance agent that sweeps systems and reports findings .

• Work weekly with a senior security and compliance consultant.

• Create runbooks, checklists, and automation for repeatable operational work.

• Support incident response, recovery, and prevention.

• Help free other team members from ad hoc platform and security work.

What We’re Looking For

• Hands-on experience keeping startup systems and platforms running.

• Cloud infrastructure, CI/CD, monitoring, backups, and recovery experience.

• Experience with access control, secrets management, cloud configuration, and security basics.

• Ability to prove backups restore and systems recover.

• Ability to code and automate routine platform or security tasks.

• Comfort using AI agents to build automation and operational workflows.

• Calm judgment during incidents and production issues.

• Strong ownership and documentation habits.

• Practical mindset: you can prioritize risks rather than create endless theoretical lists.

Our Current Stack

• Azure AKS / Kubernetes

• Azure Blob Storage

• Azure Monitor / OpenTelemetry

• Terraform

• Helm

• CI pipelines

• PostgreSQL

• Redis

• Some AWS

• TypeScript applications using Node.js / Hono and React

• Medplum / FHIR

• Healthcare data, HIPAA, patient-data protection, vendor risk, and AI-tool risk

What “AI-Native Platform Engineering” Means for This Role
For this role, being AI-native means you can:

• Use agents to inspect configurations, draft runbooks, and automate checks.

• Build recurring security and compliance sweeps.

• Use AI to accelerate infrastructure review without blindly trusting it.

• Create workflows that surface risks before humans remember to check.

• Automate operational evidence gathering.

• Maintain human approval for sensitive actions.

• Keep permissions, secrets, and production access tightly controlled.

• AI should help you create a more reliable platform, not become another unmanaged risk.

Nice to Have

• Healthcare or HIPAA experience.

• Security background, such as cloud security, SOC, or incident response.

• Compliance framework experience, especially HIPAA or SOC 2.

• Azure and AKS production experience.

• Kubernetes at production scale .

What Success Looks Like
In your first 30 days, you will review the current setup, agree the top platform and security gaps, demonstrate a backup restore and deployment rollback, and produce a prioritized improvement list ..
Within your first 90 days, monitoring and alerting will be in place, top security gaps will be closed, the first version of the daily security/compliance agent will be running, and compliance evidence will be organized ..
Over time, success means Zenara has a reliable, secure, HIPAA-ready…