Work Location: Bengaluru
About Candor Health
Candor Health offers a suite of AI-native provider data management solutions that tackle healthcare's data accuracy problem at its core. The result: fragmented, error-prone records become a reliable, continuously verified asset. By synthesizing 120,000+ sources and processing four billion claims monthly, Candor Health strengthens operational workflows around network optimization, credentialing, compliance, and near-real-time provider search.
The result helps health plans, digital health companies, and health systems move from reactive fixes to proactive strategy. Backed by an internal validation team and a genuine client-first partnership model, our solutions turn provider data into a lasting strategic asset that strengthens networks and builds trust.
Life at Candor
At Candor Health, everyone is a leader. The areas you own are yours to build and progress. Best ideas win! We value a culture where the team not only enjoys working together solving some of the biggest data challenges in the healthcare industry, but also has fun doing it. Building a great company is hard work but work-life balance is also important.
About the Role
As a Security & Cloud Operations Engineer, you will help keep Candor’s cloud platform secure, reliable, and ready for audit. You will make hands-on infrastructure changes, manage access and security controls, and keep recurring operational and compliance work moving. You should be comfortable investigating a permissions issue, reviewing a Terraform change, and producing clear evidence of how a control works.
You will independently investigate issues, propose practical improvements, and own scoped work through reviewed implementation, validation, and documentation. You will partner with the Security & Ops technical lead, engineering teams, and business control owners. Designated leaders own security architecture and risk acceptance; service teams retain application ownership.
Responsibilities
Cloud Infrastructure & Reliability
- Maintain and improve AWS infrastructure through reviewed Terraform changes. Troubleshoot permissions, resource configuration, and service dependencies, and document changes and recovery steps.
- Support EKS and Kubernetes operations, including node groups, autoscaling, workload disruption controls, and persistent storage. Work with service owners to investigate reliability issues.
- Maintain shared monitoring and logging infrastructure and enable service teams to use it. Review storage usage and cloud costs, automate recurring checks, and recommend practical improvements.
Security Engineering & Access
- Implement least-privilege IAM policies, workload identities, and secure CI authentication. Improve secrets handling and Kubernetes access controls through approved plans and reviews.
- Configure and maintain security controls such as WAF rules and security logging. Investigate findings and propose improvements. Deliver scoped fixes and track remediation through validation with engineering and security partners.
- Handle approved staff and customer access changes, onboarding and offboarding, and recurring access reviews. Keep permissions and completion evidence accurate and current.
Compliance Operations & Readiness
- Maintain Drata records, vendor inventories, control documentation, and supporting evidence. Gather vendor security questionnaires and compliance documents, follow up on gaps, and support SOC 2 audit preparation.
- Maintain practical onboarding and security instructions. Coordinate security training, incident-response exercises, and follow-up actions with the responsible teams.
- Keep incident playbooks and operational runbooks usable and current. Participate in agreed operational coverage, escalate under the incident-response process, and track assigned improvements through closure.
Qualifications
Required
- 3+ years of relevant hands-on experience in security operations, cloud infrastructure, DevOps, or a related engineering role.
- Demonstrated ability to independently own cloud or security operations work from investigation and planning through reviewed implementation, validation, documentation, and follow-through.
- Hands-on experience operating AWS infrastructure and using Terraform to make reviewable, maintainable changes.
- Working experience with Kubernetes or EKS, including identity, permissions, storage, and troubleshooting workload or infrastructure issues.
- Practical understanding of least privilege, IAM, secrets management, logging, and secure deployment workflows. Ability to investigate access problems without defaulting to broad permissions.
- Ability to automate recurring operational tasks with scripts, use version control, and document changes clearly enough for another engineer to support them.
- Experience executing security controls or supporting audit readiness, with careful evidence collection and reliable follow-through on access reviews and remediation.
- Clear communication and sound judgment about change risk, escalation, and when a decision requires a technical lead or business owner.
Preferred
- Experience with Drata or a similar compliance platform, SOC 2 evidence, vendor reviews, or security-awareness programs.
- Experience with Prometheus, Grafana, CloudWatch, WAF, workload identity, or CI/CD authentication improvements.
- Experience improving cloud costs and reliability, maintaining incident playbooks, or supporting tabletop exercises.
- Experience in a SaaS or healthcare-data environment.
How You Work
- Own the follow-through. Keep work organized, close the loop, and communicate progress, dependencies, risks, and decisions early.
- Make careful changes. Prefer scoped access, reviewable infrastructure changes, clear validation, and documented recovery steps.
- Stay practical. Improve the process while doing the detailed work, and build documentation and automation that others can use.
