This opportunity
Success in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.
At Truveta, data security is not just an internal requirement; it is essential to enabling trusted research, regulatory-grade evidence, and responsible innovation at scale. Truveta has achieved HITRUST r2 certification, completed a SOC 2 Type 2 examination, and maintains ISO 27001 certification, with ISO 27701 and ISO 27018 extensions. These certifications reflect a rigorous, independently assessed approach to managing risk, protecting sensitive data, and maintaining the controls required for a highly trusted research environment.
Responsibilities
Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs.
Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads.
Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance.
Secure Azure Kubernetes clusters, containers, and images.
Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations.
Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency.
Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise.
Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems.
Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs.
Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations.
Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure.
Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools.
Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls.
Qualifications
A minimum bachelor's in computer science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent
5+ years’ experience in public cloud networking & security design, implementation & support
Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management
3+ years automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template
3+ years network security practices in on-premises and/or cloud environment
Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment
Understanding the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf.
Ability to participate in on-call rotation
Preferred qualifications
Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP)
Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency
Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture
Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.)
