{"id":124306,"url":"https://alion.io/job/arintra-head-of-devsecops","title":"Head of DevSecOps","company":{"id":424,"name":"Arintra","domain":"arintra.com","url":"https://alion.io/company/arintra","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":65000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":238},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ElasticSearch","optional":false},{"name":"GCP","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Google Cloud Run","optional":false},{"name":"Google GKE","optional":false},{"name":"Google Workspace","optional":false},{"name":"Grafana","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Loki","optional":false},{"name":"New Relic","optional":false},{"name":"Okta","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"TPU","optional":false},{"name":"Gemini","optional":true},{"name":"Java","optional":true},{"name":"Langfuse","optional":true},{"name":"OpenAI","optional":true}],"status":"live","first_seen_at":"2026-08-26T05:37:37Z","employer_posted_date":null,"last_verified_at":"2026-08-26T05:37:37Z","board_verified":false,"closed_at":null,"days_open":52,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":52},"description":"We are looking for a Head of Infrastructure, Security and Compliance who will own the reliability, security, and compliance posture of Arintra's technology platform end-to-end. This is a hands-on leadership role where you will both architect and execute, while building and mentoring a team. You will be the single accountable owner for GCP infrastructure, observability, HIPAA and SOC 2 compliance, IT and data security, and vendor management. You will work closely with the Founder/CEO, Engineering Leads, and Customer teams, and will represent our security posture to enterprise hospital customers.\nThe candidate will have responsibilities across the following functions:\nInfrastructure and Platform:\nArchitect and manage Arintra's GCP environment: GKE, Cloud SQL (PostgreSQL), Pub/Sub, BigQuery, Cloud Run, VPC, IAM.\nOwn environment stability across dev, staging, and production; define and enforce deployment standards and isolation.\nLead cost optimisation initiatives: committed use discounts, rightsizing, BigQuery cost governance, idle resource management.\nBuild and maintain Infrastructure-as-Code practices using Terraform or equivalent.\nManage AI infrastructure, LLM serving pipelines, inference cost management, GPU/TPU provisioning where needed.\nOwn disaster recovery and business continuity planning, RTO/RPO definitions, and failover testing.\nObservability and Reliability:\nOwn and mature Arintra's observability stack: Grafana, New Relic, Loki.\nDefine SLOs/SLAs across services and build alerting frameworks that distinguish tech alerts from business alerts.\nReduce MTTR by leading incident response, RCA culture, and post-mortem processes.\nBuild dashboards for real-time automation rate monitoring and system health visibility for both engineering and business stakeholders.\nOwn Arintra's security posture: network segmentation, IAM least privilege, secrets management, encryption at rest and in transit.\nDefine and enforce security policies for PHI/PII handling across all systems and teams.\nLead vulnerability management, penetration testing scheduling, and security incident response.\nEnsure SMART on FHIR integrations meet security and data isolation requirements for EHR customers.\nDrive security-as-code practices and shift-left security across the engineering SDLC.\nBuild security awareness across engineering and non-engineering teams and compliance.\nOwn HIPAA compliance end-to-end policies, controls, BAA management, and ongoing audit readiness.\nLead and complete SOC 2 Type II certification controls design, evidence collection, and gap remediation.\nManage audit cycles, internal and external, with hospital customers and third-party auditors.\nBuild and maintain a compliance calendar and controls monitoring framework\nEvaluate and pursue HITRUST as the customer base grows into larger health systems.\nIT and Vendor Management:\nOwn endpoint management, MDM, SSO/IdP (Google Workspace, Okta), and access lifecycle management for the org.\nManage external vendors' security tooling, cloud cost management, and compliance platforms.\nConduct vendor security reviews and maintain a third-party risk register.\nNegotiate contracts and SLAs with infrastructure and security vendors.\nLeadership and Team:\nHire, develop, and retain a high-performing infra and security team.\nDefine career paths and growth frameworks for ICs and leads on the team.\nCommunicate infrastructure roadmap, security posture, and compliance status to leadership and enterprise customers.\nPartner with Engineering Leads on SDLC security integration and quality gates.\nRequirements:\n10+ years in infrastructure, DevOps, or cloud engineering with genuine production ownership, not just participation.\n3+ years in a leadership or management capacity owning a team.\nDeep hands-on GCP expertise in multi-environment production setup, cost reduction, and IaC.\nHas led or co-led a SOC 2 Type II or HIPAA audit end-to-end, not just supported one.\nStrong security fundamentals: IAM, network security, secrets management, PHI/PII data classification.\nDemonstrated cost reduction outcomes: specific numbers and methods, not just frameworks.\nHas built or significantly matured an observability stack from near-scratch.\nComfortable being both hands-on and strategic simultaneously; this is not a pure management role.\nStrong Plus:\nExperience at a healthcare tech or regulated-industry startup at Series A-C stage.\nFamiliarity with FHIR, EHR integrations, and PHI data classification in clinical systems; AI/ML infrastructure experience: model serving, LLM cost management, inference pipelines; HITRUST awareness or prior certification experience.\nCertifications: GCP Professional Cloud Architect, CISSP, CISM, or equivalent.\nExperience with our stack: Java, Python, GCP, PostgreSQL, Elasticsearch, Langfuse, OpenAI/Gemini APIs.\nWhat Good Looks Like in 12 Months\nSuccess Looks Like:\nInfra Stability - Zero P0 incidents from infra causes; environment parity enforced across environments.\nCost - 15-25% reduction in cloud spend with documented methodology.\nCompliance - SOC 2 Type II in progress or completed; HIPAA controls fully documented and tested.\nObservability - SLOs defined for all critical services; alerting noise reduced by 50%+.\nSecurity - Security policy rollout complete; first pen test completed and findings remediated.\nTeam - Infra team of 3-4 hired and onboarded with clear ownership and growth paths.","description_format":"text","description_chars":5396,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Medical AI","Revenue Cycle & Medical Billing"],"lifecycle":[{"event":"open","at":"2026-08-26T05:37:37Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.605,"p_room":0.45,"age_days":52,"expected_fill_days":30,"reasons":["seen:52","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/arintra-head-of-devsecops","json_url":"https://alion.io/job/arintra-head-of-devsecops.json","meta":{"generated_at":"2026-10-17T09:53:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12994,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":424},"rest":"https://alion.io/mcp/rest/get_company?id=424"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farintra-head-of-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farintra-head-of-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farintra-head-of-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arintra-head-of-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farintra-head-of-devsecops"}]}