{"id":2852742,"url":"https://alion.io/job/candor-health-security-cloud-operations-engineer","title":"Security & Cloud Operations Engineer","company":{"id":3792284,"name":"Candor Health","domain":"candorhealth.com","url":"https://alion.io/company/candorhealth","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"C","score":56,"open_postings":11,"ghost_share":0.727,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-31T05:58:55Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Prometheus","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-19T12:36:27Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-11-01T00:34:39Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":11},"description":"Work Location: Bengaluru\nAbout Candor Health\nCandor Health offers a suite of AI-native provider data management solutions that tackle healthcare's data accuracy problem at its core. The result: fragmented, error-prone records become a reliable, continuously verified asset. By synthesizing 120,000+ sources and processing four billion claims monthly, Candor Health strengthens operational workflows around network optimization, credentialing, compliance, and near-real-time provider search.\nThe result helps health plans, digital health companies, and health systems move from reactive fixes to proactive strategy. Backed by an internal validation team and a genuine client-first partnership model, our solutions turn provider data into a lasting strategic asset that strengthens networks and builds trust.\nLife at Candor\nAt Candor Health, everyone is a leader. The areas you own are yours to build and progress. Best ideas win! We value a culture where the team not only enjoys working together solving some of the biggest data challenges in the healthcare industry, but also has fun doing it. Building a great company is hard work but work-life balance is also important.\nAbout the Role\nAs a Security & Cloud Operations Engineer, you will help keep Candor’s cloud platform secure, reliable, and ready for audit. You will make hands-on infrastructure changes, manage access and security controls, and keep recurring operational and compliance work moving. You should be comfortable investigating a permissions issue, reviewing a Terraform change, and producing clear evidence of how a control works.\nYou will independently investigate issues, propose practical improvements, and own scoped work through reviewed implementation, validation, and documentation. You will partner with the Security & Ops technical lead, engineering teams, and business control owners. Designated leaders own security architecture and risk acceptance; service teams retain application ownership.\nResponsibilities\nCloud Infrastructure & Reliability\nMaintain and improve AWS infrastructure through reviewed Terraform changes. Troubleshoot permissions, resource configuration, and service dependencies, and document changes and recovery steps.\nSupport EKS and Kubernetes operations, including node groups, autoscaling, workload disruption controls, and persistent storage. Work with service owners to investigate reliability issues.\nMaintain shared monitoring and logging infrastructure and enable service teams to use it. Review storage usage and cloud costs, automate recurring checks, and recommend practical improvements.\nSecurity Engineering & Access\nImplement least-privilege IAM policies, workload identities, and secure CI authentication. Improve secrets handling and Kubernetes access controls through approved plans and reviews.\nConfigure and maintain security controls such as WAF rules and security logging. Investigate findings and propose improvements. Deliver scoped fixes and track remediation through validation with engineering and security partners.\nHandle approved staff and customer access changes, onboarding and offboarding, and recurring access reviews. Keep permissions and completion evidence accurate and current.\nCompliance Operations & Readiness\nMaintain Drata records, vendor inventories, control documentation, and supporting evidence. Gather vendor security questionnaires and compliance documents, follow up on gaps, and support SOC 2 audit preparation.\nMaintain practical onboarding and security instructions. Coordinate security training, incident-response exercises, and follow-up actions with the responsible teams.\nKeep incident playbooks and operational runbooks usable and current. Participate in agreed operational coverage, escalate under the incident-response process, and track assigned improvements through closure.\nQualifications\nRequired\n3+ years of relevant hands-on experience in security operations, cloud infrastructure, DevOps, or a related engineering role.\nDemonstrated ability to independently own cloud or security operations work from investigation and planning through reviewed implementation, validation, documentation, and follow-through.\nHands-on experience operating AWS infrastructure and using Terraform to make reviewable, maintainable changes.\nWorking experience with Kubernetes or EKS, including identity, permissions, storage, and troubleshooting workload or infrastructure issues.\nPractical understanding of least privilege, IAM, secrets management, logging, and secure deployment workflows. Ability to investigate access problems without defaulting to broad permissions.\nAbility to automate recurring operational tasks with scripts, use version control, and document changes clearly enough for another engineer to support them.\nExperience executing security controls or supporting audit readiness, with careful evidence collection and reliable follow-through on access reviews and remediation.\nClear communication and sound judgment about change risk, escalation, and when a decision requires a technical lead or business owner.\nPreferred\nExperience with Drata or a similar compliance platform, SOC 2 evidence, vendor reviews, or security-awareness programs.\nExperience with Prometheus, Grafana, CloudWatch, WAF, workload identity, or CI/CD authentication improvements.\nExperience improving cloud costs and reliability, maintaining incident playbooks, or supporting tabletop exercises.\nExperience in a SaaS or healthcare-data environment.\nHow You Work\nOwn the follow-through. Keep work organized, close the loop, and communicate progress, dependencies, risks, and decisions early.\nMake careful changes. Prefer scoped access, reviewable infrastructure changes, clear validation, and documented recovery steps.\nStay practical. Improve the process while doing the detailed work, and build documentation and automation that others can use.","description_format":"text","description_chars":5881,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Care Coordination & Population Health"],"lifecycle":[{"event":"open","at":"2026-10-19T13:50:39Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.571,"p_room":0.9,"age_days":11,"expected_fill_days":30,"reasons":["conf:3","stale_co","win:mid"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/candor-health-security-cloud-operations-engineer","json_url":"https://alion.io/job/candor-health-security-cloud-operations-engineer.json","meta":{"generated_at":"2026-11-01T03:07:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4823,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3792284},"rest":"https://alion.io/mcp/rest/get_company?id=3792284"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcandor-health-security-cloud-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcandor-health-security-cloud-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcandor-health-security-cloud-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/candor-health-security-cloud-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcandor-health-security-cloud-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2852742}},{"tool":"search_jobs","arguments":{"company":"candorhealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2852742},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}