Senior DevSecOps Engineer

Senior DevSecOps Engineer

At ClearDATA, we provide secure, compliant cloud and managed services designed specifically for the healthcare industry. We are looking for a Senior DevSecOps Engineer to join our Professional Services team and lead technical implementations across AWS, Azure, and GCP environments.

We're looking for a Senior DevSecOps Engineer to build security into how ClearDATA ships software. You'll work closely with our R&D organization to secure CI/CD pipelines, harden build and deployment processes, and make sure security is part of engineering's workflow rather than a gate at the end of it.

Work Mode: Remote

Shift Timings: Monday to Friday – 5:30pm IST to 2:30am IST Location: Mumbai - Remote

Pipeline & Build Security

• Partner with R&D to design and maintain secure CI/CD pipelines, from code commit through deployment.
• Integrate static and dynamic application security testing (SAST/DAST), dependency and container scanning, and secrets management into the development lifecycle.
• Harden build systems, artifact repositories, and deployment tooling against common attack paths.
• Own infrastructure-as-code security: reviewing and improving how Terraform, Kubernetes, and cloud configurations are written and deployed.

Partnership with R&D

• Act as the security point of contact for engineering teams, helping them fix issues without slowing them down unnecessarily.
• Review new tools, services, and architecture decisions for security implications before they ship.
• Build automation and guardrails so secure practices are the path of least resistance for developers, not an extra step.

Cross-Team Collaboration

• Work with the IT/ITSec Manager and Senior Compliance Analyst to make sure pipeline and infrastructure changes stay aligned with our compliance obligations.
• Support incident response for anything touching build, deployment, or production infrastructure.
• Help set and maintain security standards for software development lifecycle.

What We Are Looking For:

• 7-8 years in DevOps, platform engineering, or security engineering, with real hands-on pipeline and infrastructure experience.
• Direct experience securing CI/CD pipelines and build systems, not just running them.
• Strong background with cloud infrastructure (AWS, Azure, or GCP) and infrastructure-as-code (Terraform or similar).
• Comfortable with containers and orchestration (Docker, Kubernetes).
• Experience with SAST/DAST tools, dependency scanning, and secrets management.
• Able to work directly with engineers' day to day and explain security tradeoffs in terms that land.
• Familiarity with HIPAA, SOC 2, HITRUST, or GDPR is a plus, especially in healthcare or another regulated industry.

Good to have

• Experience in a healthcare, fintech, or other regulated environment where security and compliance carry real weight.
• Relevant certifications such as AWS/Azure/GCP security specialties, CKS, or similar.
• A background writing your own tooling or automation rather than just configuring off-the-shelf products.

Soft Skills/ Behavioural Skills:

1. Excellent Communication Skills (Written & Verbal)

2. Working Independently.

3. Critical Thinking

Benefits:

• Annual Public Holidays as applicable
• 30 days total leave per calendar year
• Mediclaim policy
• Lifestyle Rewards Program
• Group Term Life Insurance
• Gratuity
• ...and more!