Cloud Infrastructure & Security Engineer (AI Applications

Role & responsibilities

• 3+ years in

  cloud infrastructure / DevOps

  (AWS, Azure, GCP).
• Hands-on with

  Kubernetes, Terraform, Docker

  .
• Strong knowledge of

  Postgres + S3-compatible storage

  .
• Experience with

  identity management systems

  (OIDC, SAML, JWT).
• Practical knowledge of

  SOC 2, HIPAA, GDPR, and ISO 27001 controls

  .
• Familiarity with

  audit logging, monitoring, and security incident response

  .
• CI/CD pipeline development (GitHub Actions, GitLab CI, etc.).
• Scripting skills (Python, Bash, or Go).

Nice-to-Have

• Experience preparing for

  SOC 2 / ISO 27001 audits

  or working in audited environments.
• Prior involvement with

  HIPAA compliance

  (PHI handling, BAAs).
• Experience working with

  GDPR obligations

  (DPAs, user data rights).
• Exposure to

  Supabase, Auth0, Cognito, or Keycloak

  .
• Knowledge of

  secrets management (Vault, AWS Secrets Manager)

  .
• Familiarity with

  vector databases (pgvector, Pinecone, Weaviate, Milvus)

  .
• Experience with

  MLOps

  tools (Kubeflow, MLflow, SageMaker).

Preferred candidate profile

• Architect and maintain a

  cloud-agnostic infrastructure

  using Docker, Kubernetes, and Terraform.
• Build

  CI/CD pipelines

  with security gates for multi-cloud and on-prem deployments.
• Manage

  databases (Postgres), object storage (S3 API), and vector search

  .
• Implement

  authentication & authorization

  (OIDC, SAML, JWT, RBAC).
• Own compliance-related infrastructure controls:

• SOC 2:

  access control, logging, encryption, monitoring.

• HIPAA:

  PHI protection, audit logging, breach response, BAAs.

• GDPR:

  data minimization, retention, right-to-erasure, EU data residency.

• ISO 27001:

  ISMS-aligned technical controls, risk assessments, incident response.
• Support

  Data Processing Agreements (DPAs)

  by implementing clear data handling and retention policies.
• Set up

  centralized monitoring/logging

  (Prometheus, Grafana, OpenTelemetry, SIEM).
• Automate

  backups, disaster recovery, and secrets management

  .
• Collaborate with AI engineers to deploy and secure

  MLOps pipelines

  .