Security Engineer - Cloud Infrastructure

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US. 

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values.

This job requires daily onsite work at our headquarters in Hyderabad.  

Who we need

Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference. 

We do things the right way. Our commitment to security, privacy, and compliance is foundational to the trust our members, customers, and partners place in us. This position is critical to protecting the infrastructure behind the most representative, complete, and timely source of linked patient data in the US.

If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you. 

This opportunity

Success in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.  

At Truveta, data security is not just an internal requirement; it is essential to enabling trusted research, regulatory-grade evidence, and responsible innovation at scale. Truveta has achieved HITRUST r2 certification, completed a SOC 2 Type 2 examination, and maintains ISO 27001 certification, with ISO 27701 and ISO 27018 extensions. These certifications reflect a rigorous, independently assessed approach to managing risk, protecting sensitive data, and maintaining the controls required for a highly trusted research environment.

Responsibilities:

• Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs.

• Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads.

• Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance.

• Secure Azure Kubernetes clusters, containers, and images.

• Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations.

• Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency.

• Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise.

• Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems.

• Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs.

• Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations.

• Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure.

• Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools.

• Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls.

Qualifications 

• A minimum bachelor's in computer science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent

• 5+ years’ experience in public cloud networking & security design, implementation & support

• Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management

• 3+ years automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template

• 3+ years network security practices in on-premises and/or cloud environment

• Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment

• Understanding the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf.

• Ability to participate in on-call rotation

Preferred qualifications

• Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP) 

• Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency

• Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture

• Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.)