Plume develops and deploys cloud based control planes with scale to manage tens of millions of customer homes through some of the world’s largest Internet Service Providers. Our cloud applications include WiFi network management and optimization, device access control, network provisioning, IoT security, and end customer user interaction through mobile apps. 

The Opportunity:

Plume is hiring a security engineer to join the security engineering team to help protect and drive the Plume mission. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our platforms, and our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

As a Sr. Security Engineer, you will focus on the technologies that ensure our networks and systems are up to industry and Plume security standards. This role will partner with various application development and stakeholder groups across Plume to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk.

What you will do:

• Drive delivery of innovative security and privacy preserving solutions tightly integrated into our software development, data engineering and business intelligence lifecycle.
• Build tools and processes which measure and assist engineering teams to create software with security and privacy by design principles 
• Develops security policies, procedures, and guidelines and recommends necessary changes to a given project team to ensure the company’s systems are fully compliant with all applicable regulatory requirements and privacy laws.
• Serving as an advisor to engineering and development teams in security best practices and design.
• Leads security-related projects from inception to successful completion and is capable of effectively coaching technology staff on appropriate security protocols and needs as they implement new technology into the organisation.
• Cloud deployments require security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for security solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas and create stronger and safer software and application deployments across Plume, measuring decreased risk and prevalence of issues.
• Prepare security assessment reports, including third-party background, security assessment scope, and results
   

Who you are: 

• Bachelor's degree in Information Security, Computer Science or related field or equivalent work experience
• 5+ years of professional experience in security engineering with a education in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; 
• Experience with software coding in Python, Shell, Go, Javascript, and/or ability to understand code/APIs for SaaS products.
• You know industry best practices for security and privacy by design, such as secure software principles, threat modelling, and pentesting.
• Knowledge of public cloud architectures, such as AWS, cryptography, and cryptographic best practices.
• Strong communication, written, presentation and interpersonal skills
• Proven ability to work unsupervised, exercise leadership, and influence change.
• You operate effectively across teams and disciplines even in highly ambiguous situations with a rack record of getting things done quickly and with quality
• Experience with security framework policies, processes and controls; such as: ISO27001, ISO27701, SOC2, NIST CSF, CIS, is a plus
• Certifications such as CISSP, AWS, CIPP, CIPPT, etc is a plus

Position Overview 

The RAN Deployment Engineer (India) is responsible for executing all deployment, installation, and integration activities required to enable stable satellite‑to‑mobile connectivity across India and within global delivery programs. This role supports gateway and cell‑site builds, performs beam surveys, validates field installations, uploads configurations, and conducts probe‑based integration checks to ensure RAN readiness for satellite network activation. 

The position works closely with regional engineering teams, the NOC, vendors, and global deployment groups to resolve technical blockers, uphold high integration quality, and support seamless service enablement. 

Operating at the intersection of field engineering and advanced satellite‑RAN deployment, this role demands precision during installation, disciplined validation practices, and continuous coordination with cross‑functional teams. The RAN Deployment Engineer must balance technical accuracy, operational urgency, and regulatory variations across India to ensure smooth and consistent readiness for global satellite network activation. 

Key Responsibilities 

Field Deployment & Installation Activities 

• Deliver RAN deployment activities including cell‑site builds, managing end-to-end field installation processes for satellite-RAN infrastructure 

• Execute installation checks and commissioning procedures to validate proper equipment mounting, cabling, power connections, and environmental controls 

• Validate CIQ inputs/outputs and CIQ-to-SCF generation to avoid deployment rework 

• Validate Cell site router to Core integration, transport readiness 

• Perform configuration uploads and software provisioning to ensure RAN equipment is properly configured according to deployment specifications 

• Perform and validate BPMS to eNB port mapping, transport, clocking, and interface readiness 

• Support Beam Go / No-Go readiness reviews and provide technical sign-off inputs 

• Own technical handover from Delivery to Service Acceptance, ensuring all acceptance criteria and artifacts are met 

• Enable stable satellite‑mobile connectivity through systematic installation, integration, and validation of RAN components and interfaces 

Technical Validation & Testing 

• Perform probe validations and acceptance testing to verify RAN functionality, connectivity, and performance against established criteria 

• Conduct integration testing between satellite-RAN equipment and terrestrial network components to ensure seamless connectivity 

• Execute acceptance tasks including functional testing, performance validation, and documentation completion for site commissioning 

• Execute Acceptance checks with vendors for handover to Service Acceptance 

Coordination & Collaboration 

• Coordinate with regional engineering, NOC, vendors, and global deployment teams to align deployment activities with project schedules and technical requirements 

• Interface with network operations centers to ensure proper monitoring integration and operational readiness during deployment phases 

• Work with vendor teams to resolve equipment issues, on site hardware delivery, coordinate software updates, and ensure proper installation procedures 

• Collaborate with global deployment teams to maintain consistency in deployment standards and share lessons learned across regions 

Technical Issue Resolution & Quality Assurance 

• Resolve technical blockers encountered during deployment including equipment failures, configuration issues, and integration challenges 

• Troubleshoot complex technical problems affecting RAN performance, connectivity, or functionality during installation and commissioning 

• Ensure reliable RAN readiness supporting global satellite network activation through comprehensive validation and quality assurance processes 

• Document and escalate unresolved issues to appropriate technical teams while implementing temporary workarounds to maintain deployment schedules  

Qualifications  

Education 

• Bachelor's degree in electrical engineering, telecommunications engineering, computer engineering, or related technical field

• Associate degree with relevant telecommunications experience accepted  

Experience 

• Minimum 4+ years in telecommunications field deployment, network installation, or wireless infrastructure commissioning 

• 2+ years hands-on experience with RAN deployment, cell site installation, or wireless network infrastructure and CIQ handling 

• Proven experience with field installation, testing, and commissioning of complex telecommunications equipment  

Required Technical Expertise 

• Strong understanding of RAN technologies, wireless communications principles, and telecommunications infrastructure 

• Knowledge of installation procedures for telecommunications equipment including Rack, eNodeB antennas, transceivers, GPS & CSR and network infrastructure 

• Familiarity with configuration management, software provisioning, and equipment commissioning processes  

Preferred Qualifications 

• Experience with satellite communications systems, satellite-RAN integration, or space-terrestrial network deployment 

• Background in field deployment roles at wireless carriers, equipment vendors, or telecommunications contractors 

• Knowledge of safety procedures and compliance requirements for telecommunications field work 

• Experience with network monitoring systems and performance validation tools 

• Familiarity with project coordination and deployment management practices  

Professional Skills 

• Strong problem-solving and troubleshooting skills for complex technical issues in field environments 

• Excellent communication skills for coordination with multiple technical teams and stakeholders 

• Proven ability to work independently in field environments while maintaining safety and quality standards 

• Experience with technical documentation, test reporting, and deployment validation procedures  

Technology Proficiency 

• Proficiency with RF testing equipment including spectrum analyzers, power meters 

• Experience with network configuration tools and equipment management systems 

• Familiarity with field measurement software and data collection tools used in wireless deployment 

• Knowledge of safety equipment and procedures required for telecommunications field work  

Skills & Competencies 

• Field Installation Expertise: Hands-on experience with telecommunications equipment installation, cabling, and commissioning procedures 

• RF Testing & Validation: Proficiency with RF measurement equipment and wireless network performance validation techniques 

• Technical Troubleshooting: Systematic approach to identifying and resolving complex technical issues in field environments 

• Safety Consciousness: Commitment to safety procedures and compliance with telecommunications industry safety standards 

• Documentation & Reporting: Clear technical writing and accurate documentation of deployment activities and test results 

• Team Coordination: Effective collaboration across multiple technical disciplines and organizational boundaries  

Cross-Functional Interfaces 

This role collaborates regularly with: 

• Internal: Regional Engineering Teams, Network Operations Center, RF Engineering, Field Operations, Quality Assurance, Program Management, Safety and Compliance 

• External: Equipment vendors, installation contractors, testing laboratories, site owners, local regulatory authorities  

Physical Requirements 

• Role will be based in India with extensive travel for field deployment activities across multiple regions (~50%) 

• Ability to perform physical field work including equipment installation,  

• Valid driver's license and ability to travel to remote deployment sites as required by project schedules 

• Ability to work flexible hours including weekends and extended shifts during critical deployment phases 

This job description may not be inclusive to the duties and responsibilities listed. Additional tasks may be assigned to the employee from time to time or the scope of the job may change as needed by business demands. 

Senior DevSecOps Engineer

Position Summary

The Senior DevSecOps Engineer will be embedded within product engineering teams to implement and maintain secure, automated, and reliable delivery pipelines while following standards, frameworks, and guardrails set by the DevSecOps Center of Excellence (CoE).

This is a hands-on role that reports to the Manager of DevSecOps and works directly with developers, SREs, and product managers to enable faster, safer deployments, cost-efficient infrastructure, and adherence to enterprise security policies. The engineer will collaborate closely with Principal and Senior Staff DevSecOps engineers for technical guidance and mentoring while operating within the centralized DevSecOps leadership framework.

Key Responsibilities

Product Line DevSecOps Execution

· Build and maintain CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, ArgoCD) for the assigned product line.

· Integrate security testing (SAST, SCA, DAST, container scanning) into build and deployment workflows.

· Apply CoE standards, templates, and automation frameworks consistently within product environments.

· Troubleshoot and resolve DevSecOps issues, escalating complex challenges to Staff/Principal engineers.

Infrastructure & Automation

· Implement Infrastructure-as-Code (Terraform, CloudFormation) for product infrastructure.

· Adopt GitOps practices for repeatable and auditable infra provisioning.

· Ensure infrastructure deployments comply with security guardrails, tagging, and cost controls.

Observability, Security & Compliance

· Collaborate with SREs to enable monitoring, logging, and observability (Prometheus, Grafana, OpenTelemetry, New Relic, CloudWatch).

· Ensure pipelines and infrastructure comply with HIPAA, SOC2, and internal security standards.

· Embed IAM, KMS, GuardDuty, Security Hub into workflows for cloud security posture.

FinOps & Cost Awareness

· Implement CoE-defined cost governance practices in product pipelines.

· Ensure workloads are tagged, right-sized, and cost-efficient.

· Provide cost visibility to product teams and support FinOps reviews.

Collaboration & Continuous Improvement

· Work closely with developers, QA, SRE, and product managers to support secure and efficient delivery.

· Participate in CoE knowledge-sharing sessions, playbooks, and Communities of Practice.

· Contribute feedback from product teams back into the CoE to improve standards and frameworks.

· Continuously learn from Staff and Principal engineers and apply best practices within the product line.

Qualifications & Experience Required

· 8+ years in DevOps, Cloud, or Security Engineering.

· Strong hands-on experience with CI/CD pipeline tools (GitHub Actions, GitLab CI, Jenkins, ArgoCD).

· Proficiency in AWS services (EKS, ECS, EC2, S3, IAM, Security Hub, GuardDuty).

· Hands-on with containers & Kubernetes (Docker, EKS).

· Experience with Infrastructure-as-Code (Terraform, Pulumi, CloudFormation).

· Familiarity with observability platforms (Prometheus, Grafana, OpenTelemetry, New Relic, CloudWatch).

· Programming/scripting in Python, Go, or shell scripting.

· Strong collaboration skills in cross-functional product teams.

Preferred

· Experience in SaaS or healthcare software environments.

· Knowledge of databases (MongoDB, Elasticsearch, SQL).

· Familiarity with compliance frameworks (HIPAA, SOC2, ISO 27001).

· Certifications: AWS Security Specialty, CKA/CKAD, FinOps Certified Practitioner

About the Company 

At Redpin, we simplify life’s most important payments. Buying a property overseas can be stressful—especially when it comes to moving money. Through our Currencies Direct and TorFX brands, we’ve been helping customers do exactly that for over 25 years.

With recent investment, we are building a new generation of digital products and services that make international real estate payments simpler, faster, and more transparent.

As part of Redpin 2.0, we are transforming from a horizontal FX platform into a verticalized, embedded software company, positioning ourselves as the global solution for real estate payments.

About the Role

At Redpin, this role is not just about managing infrastructure — it’s about building intelligent, scalable, and developer-first platforms that power our next-generation digital products.

As a Senior Software Engineer – DevOps, you will play a hands-on role in designing, building, and operating cloud-native infrastructure and DevOps platforms, with a strong emphasis on automation, reliability, security, and cost efficiency.

We are looking for a DevOps Engineer with exposure to AI/ML or Generative AI use cases, who can help us embed intelligence into our engineering ecosystem — from pipelines to observability and platform operations.

What You'll Do

AI / ML / GenAI

• Hands-on experience with platforms such as OpenAI, Bedrock, or Vertex AI
• Strong understanding of prompt engineering and AI API integrations
• Solid foundation in machine learning concepts and LLM architectures

Cloud Infrastructure (AWS)

• Design and implement AI-powered automation solutions for DevOps and platform engineering use cases
• Build and integrate AI agents to enhance developer productivity
• Develop and maintain CI/CD pipelines with AI-assisted workflows
• Design, provision, and operate secure, scalable AWS infrastructure
• Work across compute, networking, storage, and IAM
• Support multi-account AWS environments and apply governance guardrails
• Implement Infrastructure as Code (IaC) using Terraform and/or CloudFormation
• Troubleshoot and resolve cloud infrastructure issues

CI/CD & DevOps Automation

• Build, maintain, and optimize CI/CD pipelines for application and microservices teams (preferably using GitLab or GitHub)
• Automate build, test, security scanning, and deployments
• Implement deployment strategies such as blue-green, canary, and rolling deployments
• Improve pipeline performance, stability, and developer experience

Cloud Security & Governance (Execution Focus)

• Implement AWS security best practices including IAM, VPC security, encryption, and secrets management
• Enforce tagging standards, access controls, and policy guardrails
• Integrate security scanning (SAST, DAST, container scanning) into CI/CD pipelines
• Support audit and compliance requirements

Reliability & Observability

• Implement and manage monitoring, logging, and alerting solutions
• Build dashboards for system health, availability, and performance
• Improve system reliability through automation and proactive monitoring

Cloud Cost Optimization

• Monitor and optimize AWS costs across services.
• Implement right-sizing, autoscaling, and storage lifecycle policies.
• Support Savings Plans and Reserved Instance optimization.
• Promote cost-efficient cloud usage and architecture

DevOps Best Practices

• Apply and promote DevOps principles such as automation, CI/CD, and IaC.
• Reduce operational toil through tooling and automation.
• Support teams in adopting cloud-native and DevOps best practices

Collaboration & Mentorship

• Work closely with application, SRE, and security teams.
• Mentor junior DevOps engineers through code reviews and hands-on guidance.
• Contribute to documentation, runbooks, and operational standards

What You’ll Need

• Strong hands-on experience with AWS (EC2, EKS, ECS, VPC, IAM, RDS, S3, CloudWatch)
• Experience building AI agents or automation bots
• Familiarity with MLOps and FinOps practices
• Strong scripting skills (Python or Bash)
• Proven experience with CI/CD tools (GitLab CI, GitHub etc.)
• Strong experience with Infrastructure as Code (Terraform preferred)
• Hands-on experience with Docker and Kubernetes (EKS)
• Solid understanding of Linux, networking, and cloud security
• Experience with monitoring, logging, and alerting systems
• Strong troubleshooting and automation skills

Bonus Points

•  AWS Config, CloudTrail, GuardDuty
• Observability tools (Corologix, ELK, Datadog)
• GitOps tools (ArgoCD, Flux)
• Scripting skills in Python, Go, or Bash
• Exposure to FinOps practices
• AWS Certified Solutions Architect – Associate or Professional

We welcome people from all backgrounds who seek the opportunity to help build a future where we connect the dots for international property payments. If you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world of PropTech forward together.

Redpin, Currencies Direct and TorFX are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, colour, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Required:

• 3+ in Windows desktop application development using Windows App SDK, WinUI (or similar), C#, XAML — and ideally additional experience with native Windows code (C++, Win32/WinRT/COM).
• Deep understanding of Windows application architecture, including interop between managed code (.NET) and native code.
• Proven track record of designing, building, and shipping production-quality desktop applications, with an emphasis on reliability, performance, scalability, and maintainability.
• Strong experience with accessibility APIs on Windows (e.g. Microsoft UI Automation or similar), and a dedication to building accessible and inclusive software.
• Excellent software engineering fundamentals: OOP, design patterns, data structures, algorithms, memory management, multi-threading or asynchronous programming (where relevant).
• Experience leading technical design, mentoring other engineers, conducting code reviews, and making architecture-level decisions.
• Strong communication skills; ability to articulate tradeoffs, collaborate with cross-functional teams, and drive consensus.
• A user-centric mindset: focus on building polished, intuitive, and accessible experiences for end users.

Preferred / Bonus:

• Experience with writing automated tests for UI — unit tests, integration tests, UI automation tests; familiarity with relevant testing frameworks.
• Experience with performance optimization for desktop apps (memory usage, startup time, rendering performance, high-DPI support, responsiveness under load).
• Experience with localization/globalization, right-to-left UI support, internationalization, accessibility for multiple regions.
• Familiarity with telemetry, analytics, crash reporting, logging, and error monitoring in desktop applications.
• Previous experience in shaping CI/CD workflows, release pipelines, and deployment strategies for desktop applications.
• Demonstrated ability to take ownership of feature areas or modules and drive them long-term, including maintenance, refactoring, and technical debt management.

What we offer

• A high-impact role: you will define architecture, shape the future of our Windows product, and directly influence what millions of users see and experience.
• A collaborative, flat-structure engineering culture — you are not just a coder, but a builder and a decision-maker.
• Opportunities to lead — mentor others, steer technical direction, and grow into broader technical leadership (e.g. Tech Lead, Architect).
• Flexibility, autonomy, and responsibility: you define how to solve problems, own features end-to-end, and contribute to long-term product vision.
• A purpose-driven mission: building software that’s reliable, accessible, and user-centered — making a real difference for people.                  

Think you’re a good fit for this job? 

Tell us more about yourself and why you're interested in the role when you apply.
And don’t forget to include links to your portfolio and LinkedIn.

Not looking but know someone who would make a great fit? 
Refer them! 

Speechify is committed to a diverse and inclusive workplace. 
Speechify does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

ABOUT THE TEAM:

The Information Technology (IT) team is the backbone of our organization, ensuring the seamless and secure operation of our technology. Our mission is to empower employees by providing reliable and innovative IT solutions that enable them to achieve their goals efficiently. We are dedicated to maintaining a robust and secure infrastructure, proactively addressing technical challenges, and offering exceptional support to foster a digitally driven and collaborative work environment.

The IT team plays a crucial role in managing our technology infrastructure, from resolving hardware and software issues to overseeing application updates and integrations, and monitoring SaaS applications, web traffic, and access to ensure a secure environment. We are committed to minimizing disruptions and ensuring uninterrupted access to essential resources through proactive support and timely resolutions

ABOUT THE ROLE:

As a IT Workplace Technology Engineer, you will own and evolve our global endpoint and workplace technology ecosystem.This role focuses on delivering a secure, scalable and seamless employee experience by leading the design,deployment and optimization of device management solutions,collaboration platforms and security-integrated tooling.You’ll work at the intersection of IT,Security and Employee experience - ensuring that our digital workplace is secure,efficient, and aligned with Zero Trust principles.

As Workplace Technology Engineer you will:

• Lead administration and lifecycle management of MDM platforms including Microsoft Intune and Jamf Pro, supporting macOS, Windows, and mobile environments.
• Manage and enhance enterprise collaboration and productivity tools including Google Workspace,Slack & Atlassian suite.
• Implement and maintain endpoint security controls such as Device Trust, Network Trust, DLP, CASB, and Secure Web Gateways (SWGs) in close partnership with the InfoSec team.
• Own and evolve the corporate wireless network stack, including design, configuration, and optimization of office Wi-Fi environments
• Architect and implement automation and configuration management using scripting and Infrastructure as Code (IaC) tools.
• Integrate and manage identity and access workflows with platforms such as Okta, enabling secure authentication and context-aware access controls.
• Define standards and drive consistency in device provisioning, compliance, patching, and user onboarding/offboarding.
• Act as technical lead for workplace IT projects, mentoring team members and serving as the final escalation point for complex endpoint issues.

What Makes You a Great Fit ?

• Bring 5+ years of experience in workplace IT, MDM and Application administration, and SaaS tooling, with 2+ years in a technical leadership or lead engineer role.
• Have deep, hands-on expertise in Google Workspace, Intune, Jamf, and device management for both macOS and Windows.
• Understand and have experience implementing Zero Trust principles, including Device Trust, Network Trust, and conditional access.
• Are comfortable writing and maintaining PowerShell, Bash, or Python scripts, and using IaC frameworks to scale device and policy management.
• Have experience managing on corporate Wi-Fi/networking initiatives in modern office environments
• Work well cross-functionally, especially with Security, HR, and IT Operations, and have a strong service mindset.
• Thrive in fast-moving environments and enjoy creating reliable, scalable systems that improve user experience and IT efficiency.

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

ABOUT THE ROLE:

Tide is hiring a Senior Staff Software Engineer to lead the architecture of our agentic platform. You will shape the shared capabilities that allow AI systems to operate safely, reliably, and at scale across Tide. That includes context, orchestration, tool execution, trust controls, observability, and evaluation. You will participate in key build versus buy decisions, integrate external components where they accelerate us, and ensure we own the parts that matter most for Tide’s trust, data advantage, and long-term platform leverage.

As a Senior Staff Engineer you’ll: 

• Define the architecture for Tide’s agentic platform
• Drive the design of shared services such as context APIs, tool layers, policy controls, and auditability 
• Partner with product, data, security, and engineering teams to turn use cases into reusable platform capabilities
• Set standards for reliability, safety, scalability, and developer experience
• Provide technical leadership across teams and unblock critical decisions
• Implement cost-management and routing logic to optimize LLM spend across different providers
• Design and build automated evaluation pipelines to measure agent reasoning accuracy and safety trajectories 

WHAT WE ARE LOOKING FOR:

• Deep experience building platform or infrastructure systems at scale
• Strong judgement across APIs, distributed systems, data, and cloud-native architecture
• Track record of leading complex cross-team technical problems
• Experience integrating third-party platforms without losing control of core architecture
• Strong understanding of reliability, security, and observability
• Experience with AI platform components is valuable, but not essential
• Experience in highly regulated industries (Fintech, Healthtech, etc.) where safety and compliance are core to the product is highly desirable 

Our Tech Stack:

• Java, Spring Boot and JOOQ to build the RESTful APIs of our microservices (but we welcome people who are used to any strongly typed general purpose programming language!)
• Event-driven architecture with messages over SNS+SQS and Kafka to make them reliable
• Primary datastores are MySQL and PostgreSQL via RDS or Aurora (we are heavy AWS users)
• Docker, Terraform, EKS used by the Cloud team to run the platform
• DataDog and Rollbar to keep it running
• GitHub with Sonarcloud, Semgrep and solid testing to power the CI/CD pipelines - new joiners are encouraged to have something deployed to production in their first 2 weeks
• Angular 2+ with ngrx on Web, Flutter for the Mobile App
• Fivetran/Snowflake/Looker for the BI insights and Python/Faust/Flask/Tecton + some ML libs for the automated decisioning and risk management

WHAT YOU’LL GET IN RETURN: 

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

TIDEAN WAYS OF WORKING

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community.

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values.

Role Overview 

We are looking for an Engineer to support and enhance our Azure DevOps and GitHub platforms, enabling efficient and secure software development workflows. 

This role is ideal for someone with a solid development background and hands-on experience with CI/CD systems, repository management, and automation. You will work closely with engineering teams to improve developer productivity while maintaining platform reliability and governance. 

You will also support adoption of GitHub Copilot and modern developer tooling. 

Key Responsibilities 

• Administer and support GitHub repositories, organizations, and access controls.  

• Build and maintain CI/CD pipelines using Azure DevOps and GitHub Actions.  

• Support implementation of branching strategies and release workflows.  

• Help enforce repository policies, permissions, and governance standards.  

• Integrate basic security controls into pipelines (secrets handling, scanning).  

• Assist in rollout and usage of GitHub Copilot, including developer guidance.  

• Automate routine tasks to improve developer efficiency and reduce manual work.  

• Troubleshoot build, deployment, and pipeline issues.  

• Monitor pipeline performance and suggest improvements.  

• Work with engineering teams to improve build and deployment processes.  

• Maintain documentation and best practices for platform usage.  

Required Qualifications 

• 6–8+ years of experience in software engineering, DevOps, or platform support.  

• Solid development experience (ability to write and understand code).  

• Hands-on experience with:  

• Azure DevOps (Pipelines, Repos, Boards – basic to intermediate)  

• GitHub (repositories, Actions, workflows)  

• Good understanding of Git and branching strategies.  

• Experience working with CI/CD pipelines.  

• Basic scripting skills (Python, PowerShell, Bash, or similar).  

• Familiarity with GitHub Copilot or similar tools.  

Preferred Qualifications 

• Exposure to Azure cloud services.  

• Familiarity with infrastructure as code (Terraform, Bicep, ARM).  

• Basic understanding of containerization (Docker, Kubernetes).  

• Awareness of security practices in CI/CD pipelines.  

• Experience in enterprise or large team environments.  

What We’re Looking For 

• Strong problem-solving mindset with willingness to learn and grow.  

• Ability to work closely with developers and understand their needs.  

• Focus on automation and improving developer experience.  

• Good collaboration and communication skills.  

• Ownership of tasks with attention to reliability and quality.  

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values.

Responsibilities  

Incident Response 

• Handle investigation and response to security incidents across endpoints, identities, email, cloud workloads, and SaaS applications 

• Act as a senior escalation point for SOC analysts during complex or ambiguous security events 

• Participate in on-call rotations and provide senior-level escalation support when needed 

• Lead or contribute to post-incident reviews (RCA, postmortems) and track remediation actions to completion 

• Ensure incidents are accurately documented for audit, compliance, and operational learning 

• Maintain and improve incident response runbooks, playbooks, and escalation procedures 

• Support incident readiness activities, including tabletop exercises and response drills 

Detection Engineering & Automation 

• Develop, tune, and maintain Microsoft Sentinel analytics rules to improve detection quality and reduce false positives 

• Design and optimize KQL queries for investigations, threat hunting, and detection engineering 

• Integrate and maintain log sources and data connectors in Microsoft Sentinel, ensuring data quality and proper normalization 

• Build and maintain SOAR automation and playbooks (Logic Apps) for alert enrichment, triage, and response 

Proactive Security & Posture 

• Perform proactive threat hunting across Microsoft Sentinel and Defender data to identify emerging or stealthy threats 

• Monitor and continuously improve detection coverage and security posture (e.g., Secure Score, exposure signals) 

SOC Maturity & Collaboration 

• Track and report on SOC and incident metrics such as MTTD, MTTA, MTTR, alert volume, and detection effectiveness 

• Partner with engineering and infrastructure teams to drive long-term remediation and risk reduction 

• Contribute to the continuous improvement of SOC tooling, automation, and operational maturity 

• Help define and improve SOC processes, workflows, and standards 

Continuous Learning 

• Stay current on threat intelligence, attacker techniques (MITRE ATT&CK), and the Microsoft security roadmap 

Key Qualifications 

• The knowledge, skills, and abilities typically acquired through the completion of a Bachelor’s degree in Cyber Security, Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience. 

• 5+ years of experience in Security Operations (SOC), Incident Response, or Detection & Response role, with demonstrated ownership of complex security incidents. 

• Hands-on experience with Microsoft Sentinel (SIEM) and Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps). 

• Proficiency in KQL (Kusto Query Language) for investigations, threat hunting, and detection engineering. 

• Experience designing, tuning, and maintaining SIEM detections and SOAR automation, including alert triage and response workflows. 

• Solid understanding of Azure cloud architecture, core services, and native security controls. 

• Familiarity with Azure Entra ID, identity security concepts, RBAC, and IAM-related threats. 

• Experience with handing high-severity security incidents, including cross-team coordination and stakeholder communication. 

• Familiarity with MITRE ATT&CK, threat actor techniques, and modern attack methodologies across cloud, identity, and endpoint environments. 

• Experience supporting on-call rotations and working in a 24/7 or follow-the-sun SOC environment. 

• Strong written and verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences. 

• Ability to mentor junior analysts and contribute to the continuous improvement of SOC processes and tooling. 

• Relevant certifications such as Microsoft Security Operations Analyst Associate, Azure Security Engineer Associate, SC-200, SC-100, CySA+, GCIH, GCIA, CISSP, or similar are strongly preferred. 

Why Truveta? 

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional, and everything in between. Join us as we build an amazing company together. 

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contactors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements. 

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

Who We Need  

Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference.  We do things the right way. Our commitment to security and compliance assurance cannot be stressed enough. This position is critical to ensuring we are successful. 

If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you.  

This Opportunity  

The successful candidate will design and support solutions that support the company’s Digital Workplace strategy. They will work on leading edge technologies that help modernize endpoint management by leveraging the cloud to quickly deliver end-user improvements. 

Responsibilities: 

• Device Management: Define, implement and maintain endpoint hardening baselines for Windows, macOS, and Linux systems with MDM such as Microsoft Intune, and JAMF. 

• Policy & Hardening: Develop and enforce security policies, standards, and procedures for all endpoint devices. Implement system hardening configurations based on industry best practices. 

• Deploy & Manage Security Tools: Implement, configure, and maintain endpoint security solutions, including Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), antivirus/anti-malware software, and host-based firewalls. 

• Incident Response: Collaborate with IT and Security team to respond to endpoint-related incidents. Triage, remediate, and contain security incidents and threats on endpoints. Perform forensic analysis when necessary. 

• Vulnerability Management: Manage the endpoint vulnerability lifecycle, from discovery and assessment to remediation, using scanning tools and patch management systems. 

• Patch Management: Design and oversee the deployment of updates, security patches for operating system and applications. 

• Automation & Scripting: Develop scripts and automation (e.g., using Python, PowerShell) to streamline security operations, automate repetitive tasks, and improve response times. 

• AI Protection: Secure endpoints used for AI development, including devices accessing model weights, training data, and production inference systems, implementing guardrails on AI tool usage (e.g., prompt injection prevention in local LLM dev tools, restricted plugins/add-ons). 

• Data Loss Prevention: Enforce data loss prevention (DLP) and encryption policies on devices used to handle sensitive AI training datasets, including PHI/PII and proprietary corporation data. 

• On-call: Ability to participate in On-call rotation. 

• On-site: This position requires daily onsite work at Truveta office in Hyderabad. 

Qualifications 

• Experience: 3-5+ years of hands-on experience in an endpoint security, cybersecurity engineering, or similar role. 

• Technical Proficiency: Deep understanding of modern operating systems (Windows, macOS) and their architecture, configuration and deployment in a large enterprise environment. 

• Cloud Experience: Strong hands-on experience on Azure Cloud PC, VM, Azure Firewall and Azure Networking. 

• MDM Expertise: Strong hands-on experience on Microsoft Intune and JAMF administration, such as device enrollment, OS upgrade/patch, configuration, profile.  

• Policy Management: Define and assign compliance/security policies to ensure corporation devices meet organizational security standards. 

• Application Management: Strong hands-on experience on applications control, deployment, patch and upgrade. 

• EPM: Proven experience with industry-leading EPM platforms such as CyberArk and BeyondTrust to control user privileged access and provide advanced threat protection and vulnerability management. 

• Networking: Solid understanding of TCP/IP IPv4/v6, experience of office network (Routing / Switching / WAN, Wi-Fi & Security) management and network security concepts. 

• Security Principles: Strong knowledge of cybersecurity frameworks (e.g., NIST, MITRE), threat intelligence, and incident response methodologies.  

• Compliance: Experiences with SOC 2 Type 2, HITRUST, and ISO compliance frameworks. Interact with the compliance team to ensure the company compliant and remediate gaps during compliance finding and controls. 

• Collaboration: Excellent verbal and written communication/presentation, ability to explain complex technical concepts to both technical and non-technical audiences. 

Why Truveta?   

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional, and everything in between. Join us as we build an amazing company together.   

We offer:   

• Interesting and meaningful work for every career stage   

• Competitive compensation   

• Comprehensive benefits with strong medical, dental, and vision insurance plans  

• 401K plan  

• Professional development for continuous learning   

• Work/life autonomy via flexible work hours and flexible paid time off  

• Generous parental leave  

• Regular team activities (virtual and in-person as soon as we are able)  

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contactors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements. 

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

This job requires daily onsite work at our headquarters in Hyderabad.   

Who we need  

Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. We are seeking candidates inspired by the opportunity to securely apply data in the development of real-world health solutions. Beyond core capabilities, we seek problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference.  

We do things the right way. Our commitment to security, privacy, and compliance is foundational to the trust our members, customers, and partners place in us. This position is critical to protecting the infrastructure behind the most representative, complete, and timely source of linked patient data in the US. 

If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you.  

This opportunity  

Success in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance.   

At Truveta, data security is not just an internal requirement; it is essential to enabling trusted research, regulatory-grade evidence, and responsible innovation at scale. Truveta has achieved HITRUST r2 certification, completed a SOC 2 Type 2 examination, and maintains ISO 27001 certification, with ISO 27701 and ISO 27018 extensions. These certifications reflect a rigorous, independently assessed approach to managing risk, protecting sensitive data, and maintaining the controls required for a highly trusted research environment. 

Responsibilities: 

• Design and implement Azure cloud-based infrastructure, including using tools for infrastructure as code(IaC) and automation to meet technical, security and business needs. 

• Design and implement Azure cloud environments (tenant, subscription, VM, storage account, databases, networking, firewalling) optimized for AI/ML workloads. 

• Manage and maintain Azure Networking, Azure firewalls/VPN and associated policies/rules, Web Application Firewall, Application Gateway, Front Door, VNET peering, ensuring security, availability, scalability, and performance. 

• Secure Azure Kubernetes clusters, containers, and images. 

• Establish and enforce Azure security policies, manage access controls, and ensure the infrastructure complies with relevant regulations. 

• Automate tenant and infrastructure provisioning, deployments, and other routine tasks to increase efficiency. 

• Monitor Azure cloud resources, analyze performance, and troubleshoot issues as they arise. 

• Perform incident troubleshoot and problem resolution for office network, cloud infrastructure, and own postmortems. 

• Work with Engineering teams and external teams, gather requirements, develop and integrate cloud solutions and support business needs. 

• Actively participate in architecture, code reviews, presentations, share learns and best practices to enable flawless deployment and quality operations. 

• Evaluate and implement new security features/services/products to secure Truveta Azure infrastructure. 

• Support innovation and cost management by developing new ideas for Azure cloud infrastructure and related tools. 

• Interact with compliance team to deliver compliance certificates and remediate gaps during compliance finding and controls. 

Qualifications  

• A minimum bachelor's in computer science, Software Engineering, Electrical or Electronics Engineering, Information Systems, or equivalent 

• 5+ years’ experience in public cloud networking & security design, implementation & support 

• Experience of TCP/IP IPv4/v6, office network (Routing/Switching/WAN, Wi-Fi & Security) management 

• 3+ years automation experience in Azure Cloud Networking / Azure DevOps or GitHub CI/CD pipelines in any of the following: Python, PowerShell, Terraform, Bicep, YAML template 

• 3+ years network security practices in on-premises and/or cloud environment 

• Experience managing and supporting Windows Desktop OS, MacOS, managed endpoint administration at scale across an enterprise sized environment 

• Understanding the Windows Desktop/Mac OS packaging, scripting, and automated deployment tools, such as Microsoft Intune and Jamf. 

• Ability to participate in on-call rotation 

Preferred qualifications  

• Experience in implementation & securing platforms/services in one or more public clouds (Azure, AWS, GCP)  

• Self-starter with proven ability to develop creative solutions that enable customers and cost efficiency 

• Interest and ability to research new and emerging technologies to better solve cloud infrastructure problems or improve security posture 

• Certifications in Cloud/Network/Security (such as Azure AZ500, AZ700, Cisco CCNA/CCNP, Fortinet NSE 3-6, Palo Alto PCNSE, etc.) 

Sr. Security Engineer - IAM 

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

This job requires daily onsite work at our headquarters in Hyderabad.   

Who We Need 

Truveta is rapidly building a talented and diverse team to tackle complex health and technical challenges. Beyond core capabilities, we are seeking problem solvers, passionate and collaborative teammates, and those willing to roll up their sleeves while making a difference. If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you. 

If you are interested in the opportunity to pursue purposeful work, join a mission-driven team, and build a rewarding career while having fun, Truveta may be the perfect fit for you. 

This Opportunity 

Success in the healthcare industry is predicated on a foundation of trust. We demonstrate our trustworthiness as stewards of health data through three foundational pillars: security, privacy, and compliance. 

The successful candidate will design, implement, and support solutions that support the company’s Digital Workplace strategy. They will work on leading edge technologies that help modernize endpoint management by leveraging the cloud to quickly deliver end-user improvements. 

Responsibilities  

• Identity Lifecycle & Access Management 

• Manage and improve provisioning, de-provisioning, and modification processes for user accounts and service principals across cloud and enterprise systems. 

• Conduct access reviews, entitlement cleanups, and role evaluations to ensure least-privilege access. 

• Identify gaps in lifecycle processes and recommend enhancements or workflow automation opportunities.

• Access Requests & Role Governance 

• Process and validate access requests, ensuring alignment with RBAC models, security policies, and job function requirements. 

• Contribute to the development and refinement of RBAC roles, access policies, and approval workflows. 

• Partner with stakeholders to analyze access patterns and propose more efficient and secure role structures.

• Application Integration & IAM Enablement 

• Support onboarding applications into IAM systems, including SSO configuration, SCIM provisioning, OAuth app integration, and secure authentication setup. 

• Work with application and engineering teams to ensure proper identity integration and consistent enforcement of IAM standards. 

• Assist with evaluating and implementing new IAM tools or capabilities as the organization evolves.

• Security Controls & Identity Governance 

• Implement and support IAM security controls such as MFA, Conditional Access policies, PIM, and identity governance features. 

• Monitor for identity threats, misconfigurations, and anomalies; proactively recommend remediation steps. 

• Participate in maturing identity governance processes such as certification campaigns, privileged access workflows, and separation-of-duty reviews. 

• Incident Response & Operational Support 

• Troubleshoot and resolve identity-related issues with moderate complexity, including authentication failures, directory sync issues, and access conflicts. 

• Investigate identity-related security alerts and coordinate escalation with Security Operations team as needed. 

• Provide SME support to IT, security, and engineering teams for IAM-related questions and problems.

• Compliance, Auditing & Reporting 

• Support internal and external audits by preparing access-related evidence, reports, and documentation. 

• Ensure IAM controls and workflows meet regulatory, security, and policy requirements. 

• Develop periodic reports on access activity, privileged accounts, anomalies, and IAM policy adherence.

• Documentation, Knowledge Sharing & Process Improvement 

• Maintain accurate and detailed documentation of IAM processes, workflows, configurations, and standards. 

• Contribute to internal knowledge bases, runbooks, training materials, and user guides. 

• Continuously evaluate IAM processes and tools to identify opportunities to streamline, standardize, or automate. 

Key Qualifications 

• The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to Computer Science, Information Security and Information Systems. 

• 5+ years of hands-on experience in an Identity and Access Management (IAM) role, with a strong focus on Azure environments. 

• Strong understanding of Azure Entra ID (Azure Active Directory), including Conditional Access, MFA, Identity Governance, PIM, directory services, and RBAC. 

• Experience supporting SSO integrations and identity protocols such as SAML, OAuth 2.0, OpenID Connect, and SCIM provisioning. 

• Ability to analyze and improve access models, workflows, and entitlements, applying least privilege and zero-trust principles. 

• Proficiency with PowerShell or similar scripting tools to automate IAM tasks and streamline operations. 

• Experience monitoring for identity-related threats, anomalous login behavior, and misconfigurations in cloud IAM environments. 

• Working knowledge of IT/security governance and compliance frameworks (e.g., SOC 2, ISO 27001, NIST) and experience supporting audits or access reviews. 

• Strong troubleshooting and diagnostic skills for identity issues involving authentication, authorization, directory sync, and permissions. 

• Excellent written and verbal communication skills, including the ability to work cross-functionally with engineering, IT, and security teams. 

• Relevant certifications preferred, such as Microsoft SC-300 (strongly preferred), AZ-104, AZ-500, or Security+. 

• Ability to work effectively in a fast-paced environment, handle multiple priorities, and take ownership of IAM responsibilities. 

• This position requires onsite work at Hyderabad, India. 

Why Truveta? 

Be a part of building something special. Now is the perfect time to join Truveta. We have strong, established leadership with decades of success. We are well-funded. We are building a culture that prioritizes people and their passions across personal, professional, and everything in between. Join us as we build an amazing company together. 

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contactors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all the requirements. 

Senior IT Engineer – Network & Endpoint Infrastructure 

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

This job requires daily onsite work at our headquarters in Hyderabad, India.  

Role Overview 

We are looking for a Senior IT Engineer to manage and support enterprise network infrastructure, endpoint devices, and secure connectivity solutions. This role is responsible for maintaining reliable local network operations, firewall management, and secure access technologies, including Zscaler and Meraki environments. 

Key Responsibilities 

• Manage and support local network infrastructure (LAN/WAN, switching, routing, Wi-Fi) 

• Configure and maintain firewalls and network security controls 

• Administer and troubleshoot Cisco Meraki devices (MX, MS, MR) 

• Manage Zscaler (ZIA/ZPA) for secure internet and private application access 

• Monitor network performance, availability, and security posture 

• Troubleshoot network issues and provide L2/L3 support 

• Implement network segmentation and access controls 

• Support VPN, remote access, and secure connectivity solutions 

• Collaborate with security teams to enforce policies and controls 

• Maintain documentation for network architecture and configurations 

• Ensure high availability and disaster recovery readiness 

• Participate in incident response for network-related issues 

Required Qualifications 

• 6–10+ years of experience in IT/network engineering 

• Strong knowledge of networking fundamentals (TCP/IP, DNS, DHCP, routing, switching) 

• Hands-on experience with firewalls and network security 

• Experience with Cisco Meraki (dashboard, configuration, troubleshooting) 

• Experience with Zscaler (ZIA/ZPA) 

• Strong troubleshooting and problem-solving skills 

• Experience supporting enterprise environments 

Preferred Qualifications 

• Experience with cloud networking (Azure preferred) 

• Familiarity with Zero Trust networking concepts 

• Experience with monitoring tools and network analytics 

• Certifications (CCNA, CCNP, Zscaler certifications) 

What We’re Looking For 

• Strong hands-on network engineer 

• Ability to troubleshoot complex issues quickly 

• Ownership mindset and reliability 

• Good communication and collaboration skills 

Why Truveta?   

Be part of a team building something that matters. At Truveta, we are building the data and intelligence platform to transform medical research, accelerate evidence generation, and improve patient care in pursuit of our mission of Saving Lives with Data. We bring together deep expertise across health, technology, and data science, and we are building a culture grounded in purpose, collaboration, and continuous learning. 

We offer:   

• Interesting and meaningful work for every career stage   

• Competitive compensation   

• Comprehensive benefits with strong medical, dental, and vision insurance plans  

• Professional development for continuous learning   

• Work/life autonomy via flexible work hours and flexible paid time off  

• Generous parental leave  

• Regular team activities (virtual and in-person as soon as we are able)  

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contactors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements. 

ABOUT THE TEAM: 

The Information Technology (IT) team is the backbone of our organization, ensuring the seamless and secure operation of our technology. Our mission is to empower employees by providing reliable and innovative IT solutions that enable them to achieve their goals efficiently. We are dedicated to maintaining a robust and secure infrastructure, proactively addressing technical challenges, and offering exceptional support to foster a digitally driven and collaborative work environment.

The IT team plays a crucial role in managing our technology infrastructure, from resolving hardware and software issues to overseeing application updates and integrations, and monitoring SaaS applications, web traffic, and access to ensure a secure environment. We are committed to minimizing disruptions and ensuring uninterrupted access to essential resources through proactive support and timely resolutions

ABOUT THE ROLE: 

As an IT Workplace Technology Engineer, you will own and evolve our global endpoint, workplace, and corporate network technology ecosystem. This role focuses on delivering a secure, scalable, and seamless employee experience by leading the design, deployment, and optimization of device management, collaboration platforms, endpoint security, and corporate networking.You will work at the intersection of IT, Security, Networking, and Employee Experience, ensuring our digital workplace aligns with Zero Trust principles and modern cloud-first architectures.

As Newtwork Engineer you will

• Lead administration and lifecycle management of MDM platforms including Microsoft Intune and Jamf Pro, supporting macOS, Windows, and mobile environments.
• Own and evolve the corporate network engineering stack, including wired and wireless networks across global office locations.
• Design, deploy, and operate cloud-managed networking solutions such as Cisco Meraki and Juniper Mist, covering access points, switches, firewalls, and SD-WAN.
• Architect and maintain secure office networking (VLANs, routing, switching, QoS, VPNs, and high-availability designs).
• Partner closely with Information Security to implement Zero Trust controls, including Device Trust, Network Trust, NAC, ZTNA, secure Wi-Fi (802.1X), DLP, CASB, and Secure Web Gateways (SWGs).
• Lead office network lifecycle management including new office builds, expansions, refreshes, and decommissioning.
• Monitor, analyze, and optimize network and endpoint performance using telemetry and analytics from Meraki, Mist, and endpoint management platforms.
• Architect and implement automation and configuration management using scripting and Infrastructure as Code (IaC) to scale device, network, and policy management.
• Integrate and manage identity and access workflows with platforms such as Okta, enabling secure authentication and context-aware access.
• Define standards and drive consistency across device provisioning, compliance, patching, onboarding, and offboarding.
• Act as the technical lead for workplace IT and networking initiatives, mentoring team members and serving as the final escalation point for complex endpoint and network issues.

What Makes You a Great Fit ?

• 5+ years of experience in workplace IT, MDM, corporate networking, and SaaS administration, with 2+ years in a technical lead or senior engineer role.
• Deep, hands-on expertise with Microsoft Intune, Jamf Pro, and device management across macOS and Windows.
• Strong experience with enterprise networking platforms such as Cisco Meraki and/or Juniper Mist, including Wi-Fi, switching, firewalls, and SD-WAN.
• Solid foundation in network engineering fundamentals (TCP/IP, DNS, DHCP, routing, switching, wireless design, and troubleshooting).
• Proven experience implementing Zero Trust architectures, including Device Trust, Network Trust, conditional access, and identity-aware networking.
• Comfortable writing and maintaining PowerShell, Bash, or Python scripts, and using IaC frameworks to automate and standardize infrastructure.
• Experience delivering and supporting modern office network environments optimized for cloud-first and hybrid work models.
• Strong cross-functional collaborator who works effectively with Security, HR, Facilities, and IT Operations.
• Thrive in fast-paced environments and enjoy building reliable, scalable systems that improve employee experience and operational efficiency.

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. 

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

TIDEAN WAYS OF WORKING:

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. 

ABOUT THE ROLE:

The Tide Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response (this role!) focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity is responsible for managing Tide's staff identity platform, ensuring that access to systems and infrastructure is secure, seamless, and aligned with modern security practices. The team uses strategies like zero trust, multi-factor authentication, and granular role-based access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key - it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

• Supporting the development and implementation of a strategic vision for threat detection, driving the overall direction and priorities for a team of highly talented engineers.
• Getting hands-on with SIEM systems, including creating custom log-parsers for in-house applications, configuring alert rules, performing log analysis and tuning detections to reduce false positives.
• Creating security automations and services to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the “anything is possible” mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Collaborating with cross-functional teams to develop and implement; business-specific threat detection rules. 
• Responsible for ensuring the quality of detections, and uptime of our detection ecosystem through mature test driven development paired with proactive health monitoring capabilities.
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.
• Leading complex incident investigations, coordinating efforts across the security, IT, and engineering teams to ensure rapid and effective containment, remediation, and recovery.
• Support as part of the wider security incident response on-call rota.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Scanner, Sentinel, SecOps.
• Strong understanding of modern attack and defence techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.

WHAT YOU’LL GET IN RETURN:

• Competitive Compensation -  competitive salary and share options
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

What We Need

NetBrain is looking for a DevOps Engineer who will combine deep network domain knowledge of current operational challenges. In this role, You'll focuses on AWS cloud infrastructure, automation, and secure deployments.NetBrain has a global presence with offices worldwide. There are opportunities for employees with top performance to transfer to other offices in the future. 

What You'll Do

• Collaborate with product, development and security teams to deliver solutions efficiently and securely.
• Design, deploy and manage scalable AWS cloud infrastructure, using advanced scripts and tools to ensure the implementation of infrastructure as code (using Terraform, CloudFormation or AWS CDK).
• Build and maintain CI/CD pipelines with automated testing and deployment gating (CodePipeline, CodeBuild, Github Actions or Jenkins).
• Automate provisioning and deployments for microservices and serverless workloads.
• Establish monitoring, tracing and alerting with CloudWatch, Prometheus/Grafana, Datadog and X-Ray.
• Implement centralized logging.
• Manage IAM roles, policies and enforce least-privilege access and implement encryption (at rest and in transit), secure APIs and AWS WAF.
• Integrate container security practices while supporting compliance efforts with automated controls and documentation.
• Configure and manage VPCs, subnets, routing, NAT gateways and secure connectivity.
• Design and maintain highly available multi-AZ and multi-region architectures.
• Develop and test backup and disaster recovery strategies (AWS Backup, RDS snapshots, S3 versioning).
• Respond to incidents, perform root cause analysis and implement preventative measures.
• Maintain clear technical documentation, runbooks and onboarding guides.

Who You Are

• 5 years of experience with cloud-related technologies such as AWS, Azure, or Google Cloud with a bachelor’s degree; or 3 years and a master’s degree.
• Expertise in programming in Python, Ruby, or Bash scripting languages.
• Solid understanding of CI/CD tools.
• AWS Professional  Certification is a plus.
• Familiar with the provision and configuration using management tools (e.g., Puppet, Chef, Ansible).
• Familiar with application monitoring tools like ELK, Splunk, or Datadog.
• Familiar with IaC such as Terraform or CloudFormation.
• Experience with SAAS project implementation. 

Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough medical discoveries, accelerate regulatory-grade evidence, and improve patient care. Today, Truveta enables research on more than 130 million de-identified patients across the US.  

Achieving Truveta’s ambitious mission requires an incredible team of talented and inspired people with a special combination of health, software and big data experience who share our company values. 

Role Overview 

We are looking for a Principal Security Engineering Manager to own and drive security across applications, cloud infrastructure, and platform operations. 

This role requires a hands-on technical leader who can design and implement security controls end-to-end while partnering closely with engineering teams. The ideal candidate brings a strong mix of software engineering, cloud architecture, and security expertise, with the ability to scale security practices in a modern, cloud-native environment. 

Key Responsibilities 

• Lead the design and implementation of security controls across the full technology stack, including applications, services, and cloud infrastructure.  

• Establish and drive secure development practices, integrating security into CI/CD pipelines and developer workflows.  

• Own programs for identifying and addressing risks, including:  

• Vulnerability discovery and remediation  

• Application and infrastructure testing  

• Continuous validation of security posture  

• Define and implement data protection strategies, including encryption, access controls, and data handling standards.  

• Conduct and govern security assessments for both internally developed systems and external vendors/partners.  

• Build and enhance identity and access control systems, ensuring least privilege and strong authentication mechanisms.  

• Develop and mature logging, monitoring, and detection capabilities to identify and respond to threats effectively.  

• Strengthen threat detection and incident response readiness through automation, telemetry, and engineering-driven approaches.  

• Design and secure cloud and network architectures, including edge protection, traffic filtering, and service isolation.  

• Drive adoption of modern security architectures such as zero trust and defense-in-depth.  

• Integrate security into emerging technologies, including AI/ML systems, ensuring protection against data leakage and model abuse.  

• Partner with engineering, platform, and product teams to embed security into system design and architecture decisions.  

• Lead by example as a hands-on engineer, contributing to design reviews, code, and automation where needed.  

• Mentor and guide engineers, raising the overall security and engineering maturity of the organization.  

Required Qualifications 

• 12–16+ years of experience in security engineering, software engineering, or cloud security.  

• Strong background in software development or DevOps, with the ability to build or review code and automation.  

• Deep understanding of:  

• Secure application design and common vulnerabilities  

• Cloud platforms (Azure preferred) and distributed systems  

• Identity systems and access control models  

• Monitoring, detection, and response mechanisms  

• Network and edge security principles  

• Experience implementing security at scale in cloud-native environments.  

• Proven ability to balance strategic thinking with hands-on execution.  

• Strong communication skills with the ability to influence engineering and leadership teams.  

Preferred Qualifications 

• Experience in regulated environments (e.g., healthcare, finance).  

• Familiarity with modern AI/ML security considerations.  

• Experience with large-scale telemetry and detection systems (e.g., SIEM platforms).  

• Knowledge of industry standards and compliance frameworks.  

• Relevant certifications (e.g., CISSP, OSCP, cloud security certifications).  

What We’re Looking For 

• A builder and problem-solver who can operate across multiple layers of the stack.  

• Someone who naturally bridges engineering and security rather than treating them separately.  

• A leader who can simplify and unify security practices across teams.  

• Strong ownership mindset with the ability to drive outcomes in a complex environment. 

We are hiring across multiple locations

India: Hyderabad, Delhi NCR, Bengaluru
Europe: London, Serbia, Sofia, Lithuania, Berlin

About Us

Are you ready to build the future of supply chain? At Gather AI, we're not just creating software; we're pioneering a new era of warehouse intelligence. We've developed a groundbreaking, vision-powered platform that uses autonomous drones and existing equipment to capture real-time data, completely digitizing workflows that have historically been manual and error-prone. This means facilities operate smarter, safer, and more efficiently, ultimately redefining "on-time, in full" delivery.

If you're looking for an opportunity to contribute to truly transformative technology and make a significant impact in a vital industry, Gather AI is the place for you. We're leading the charge in the rapidly evolving robotics industry, and we invite you to join us in reshaping the global supply chain, one intelligent warehouse at a time.

About the Team

This role sits within the Backend and Platform Engineering organization. You'll work day-to-day alongside the Fullstack Engineering team, ensuring application services have the cloud infrastructure they need to scale safely and deploy reliably. You'll also partner closely with the ML Systems Engineering (Ops) team, enabling the infrastructure capabilities required for production ML pipelines, model serving, and data workloads. Cross-functionally, you'll collaborate with QA, Release Engineering, and Platform and Security stakeholders to ensure cloud environments support stable testing pipelines, access control, secrets management, and operational governance.

About the Role

We are looking for a Cloud Engineer (Platform & Infrastructure) to help mature our cloud operations into a structured and scalable platform. Our foundational infrastructure is already in place and actively supporting production workloads, but many current practices evolved organically during earlier growth stages. Rather than building from scratch, you'll evolve an existing production environment by introducing stronger operational patterns, improving deployment safety, and ensuring our infrastructure layer reliably supports increasing system scale. This role offers meaningful ownership of the infrastructure backbone supporting a platform that combines real-time application systems with machine learning workloads, and the opportunity to influence how systems are deployed, operated, and scaled as the organization grows.

What You'll Do

• Review and rationalize current Azure and AWS environments, identifying configuration drift, security gaps, and operational inconsistencies, and establish clear configuration standards across cloud accounts
• Introduce repeatable Infrastructure-as-Code patterns to ensure cloud resources are provisioned, versioned, and audited through automated workflows
• Strengthen CI/CD pipelines for infrastructure and application deployment to reduce manual operations and increase release safety across both application services and ML workloads
• Establish consistent logging, metrics, and alerting practices across infrastructure and container workloads to improve operational visibility
• Audit and improve cloud security practices including IAM policies, secrets management, network segmentation, and operational access controls
• Evaluate current infrastructure architecture and introduce patterns that enable workloads to operate portably across both Azure and AWS environments
• Improve Kubernetes platform reliability by refining autoscaling policies, workload isolation, and cluster lifecycle management
• Partner with Fullstack and ML teams to reduce infrastructure friction around environments, networking, and resource provisioning

What You'll Need

• Bachelor's degree in Computer Science, Engineering, or a related field
• 5+ years of experience operating production cloud infrastructure at scale
• Deep experience with at least one major cloud provider (Azure or AWS) and working familiarity with the other
• Hands-on experience with Kubernetes and Docker for running containerized workloads in production environments
• Proficiency with Terraform or equivalent Infrastructure-as-Code tooling for provisioning and managing cloud infrastructure
• Experience implementing automated deployment pipelines using tools such as GitHub Actions, GitLab CI, or similar platforms
• Strong operational mindset with a focus on reliability, automation, and clear technical documentation

Nice to Have

• Experience with observability tooling such as Prometheus, ELK, OpenTelemetry, or similar logging, metrics, and monitoring systems
• Familiarity supporting ML infrastructure workloads including pipeline orchestration, model deployment, and scalable inference environments
• Experience working in logistics, robotics-adjacent platforms, or real-time distributed systems
• Track record of translating application requirements into secure, reliable, and operationally safe infrastructure architecture
• Exposure to cloud cost visibility and optimization practices
• Experience introducing infrastructure governance standards including templates, security baselines, and operational documentation

Software Engineer (AI Platforms)

About SingleStore

At SingleStore, we’re not just building a database company, we’re defining the future of data management. Going beyond multi-cloud, we offer customers flexible networking, storage, and compute options to meet their requirements. With a few clicks, our cloud service spins up production grade infrastructure using the latest capabilities of major cloud providers and the industry standard Kubernetes ecosystem.

As data systems evolve, the “database” is no longer just where queries run, it’s becoming the foundation for realtime AI applications: retrieval, reasoning, agent workflows, and intelligent automation over enterprise data. That’s the direction we’re building toward.

About the AI Platform Team

We build the software platform that powers AI native experiences across SingleStore: AI/ML capabilities, agent runtimes, tool integration, and the operational layer required to run these systems reliably at scale. Our work sits at the intersection of distributed systems, cloud infrastructure, and practical applied AI.

This team is not “pure research”, it’s engineering heavy. You’ll build product grade systems that let customers safely and reliably use AI on their data.

Role Summary

We are looking for a Software Engineer to design and implement core platform capabilities for AI/ML and AI Agents in SingleStore Cloud. You’ll work on services that enable model/tool orchestration (e.g.  MCP style tool discovery and execution), agent workflows, retrieval pipelines (embeddings/vector search), evaluation/observability, and secure multi tenant operations.

You will likely find yourself using Go and Python, Kubernetes, cloud primitives, and the right tools for the job,  while applying solid AI/ML fundamentals to make correct engineering decisions.

Role and Responsibilities

• Build and evolve backend services that power AI features: agent orchestration, tool execution, retrieval/RAG pipelines, and model serving integrations.
• Design APIs and control plane workflows for AI platform components (tenant-aware, secure by default, observable).
• Implement MCP style tool discovery / integration patterns so agents can safely call tools, connectors, and internal services.
• Work closely with product managers, designers, customers, and partner engineering teams to deliver high quality AI experiences.
• Engineer for reliability and scale: latency, cost controls, rate limiting, fallbacks, rollouts, and incident response readiness.
• Establish best practices around evaluation: offline test sets, regression detection, prompt/model/version tracking, and quality gates.
• Contribute to secure AI by design approaches: permissions, data access boundaries, prompt injection defenses, and auditability.
• Mentor junior engineers and contribute to a welcoming, high ownership team environment.

Required Skills and Experience

This is a software engineering role that requires strong fundamentals plus working knowledge of AI/ML concepts.

• Strong software engineering skills with experience in distributed systems (Go, Python, or similar).
• Experience building cloud native services: Kubernetes, containers, service-to-service APIs, CI/CD.
• 4+ years of experience working on a SaaS product or production platform.
• Solid understanding of AI/ML fundamentals (you don’t need to be a researcher, but you should understand concepts well enough to build correct systems):
• Supervised learning basics (training vs inference, overfitting, evaluation metrics, classification, anomaly detection, forecasting, regression etc.)
• LLM basics (tokens, context windows, prompting, tool/function calling concepts)
• Embeddings + vector search fundamentals (similarity, indexing tradeoffs, retrieval pitfalls)
• Strong debugging and problem-solving skills, including incident-style troubleshooting across services and infrastructure.
• Intellectual curiosity about investigating issues that impact product quality, reliability, latency, and business metrics.
• Passion for building robust, maintainable systems in a fast-paced, team-oriented environment.

Nice to Have (Preferred)

• Hands on experience with AI agents and orchestration frameworks (tool calling, workflows, planners/executors).
• Practical experience with RAG systems, reranking, grounding, and evaluation strategies.
• Experience with model serving patterns (batch/online inference, caching, streaming responses).
• Knowledge of security considerations for AI systems (data isolation, RBAC, prompt injection threats, audit logs).
• Familiarity with vector databases or vector capabilities in modern data platforms.
• Experience with observability stacks (structured logging, metrics, tracing) and SLO driven engineering.

Tech Stack

Go, Python, Kubernetes, cloud infrastructure, distributed systems, APIs, and modern AI tooling (LLM providers, embeddings, retrieval systems, eval/observability pipelines), ML tooling.

Required:

• 3+ in Windows desktop application development using Windows App SDK, WinUI (or similar), C#, XAML — and ideally additional experience with native Windows code (C++, Win32/WinRT/COM).
• Deep understanding of Windows application architecture, including interop between managed code (.NET) and native code.
• Proven track record of designing, building, and shipping production-quality desktop applications, with an emphasis on reliability, performance, scalability, and maintainability.
• Strong experience with accessibility APIs on Windows (e.g. Microsoft UI Automation or similar), and a dedication to building accessible and inclusive software.
• Excellent software engineering fundamentals: OOP, design patterns, data structures, algorithms, memory management, multi-threading or asynchronous programming (where relevant).
• Experience leading technical design, mentoring other engineers, conducting code reviews, and making architecture-level decisions.
• Strong communication skills; ability to articulate tradeoffs, collaborate with cross-functional teams, and drive consensus.
• A user-centric mindset: focus on building polished, intuitive, and accessible experiences for end users.

Preferred / Bonus:

• Experience with writing automated tests for UI — unit tests, integration tests, UI automation tests; familiarity with relevant testing frameworks.
• Experience with performance optimization for desktop apps (memory usage, startup time, rendering performance, high-DPI support, responsiveness under load).
• Experience with localization/globalization, right-to-left UI support, internationalization, accessibility for multiple regions.
• Familiarity with telemetry, analytics, crash reporting, logging, and error monitoring in desktop applications.
• Previous experience in shaping CI/CD workflows, release pipelines, and deployment strategies for desktop applications.
• Demonstrated ability to take ownership of feature areas or modules and drive them long-term, including maintenance, refactoring, and technical debt management.

What we offer

• A high-impact role: you will define architecture, shape the future of our Windows product, and directly influence what millions of users see and experience.
• A collaborative, flat-structure engineering culture — you are not just a coder, but a builder and a decision-maker.
• Opportunities to lead — mentor others, steer technical direction, and grow into broader technical leadership (e.g. Tech Lead, Architect).
• Flexibility, autonomy, and responsibility: you define how to solve problems, own features end-to-end, and contribute to long-term product vision.
• A purpose-driven mission: building software that’s reliable, accessible, and user-centered — making a real difference for people.                  

Think you’re a good fit for this job? 

Tell us more about yourself and why you're interested in the role when you apply.
And don’t forget to include links to your portfolio and LinkedIn.

Not looking but know someone who would make a great fit? 
Refer them! 

Speechify is committed to a diverse and inclusive workplace. 
Speechify does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

GENERAL FUNCTION

We’re looking for a Senior IAM Engineer to design, implement, and manage identity and access management solutions across the organization. This role will play a critical part in securing systems, enabling seamless access for users, and ensuring compliance across internal and customer-facing platforms.

WHAT YOU’LL DO

IAM Architecture & Engineering

• Design, implement, and maintain IAM solutions across platforms such as Azure Entra ID, AWS IAM, Active Directory, and Okta
• Support the rollout and optimization of centralized IAM platforms
• Partner with security, infrastructure, and application teams to strengthen IAM architecture

Access Lifecycle Management

• Manage end-to-end user lifecycle including provisioning, de-provisioning, and access reviews
• Implement role-based access controls and enforce least privilege and zero-trust principles
• Ensure secure and efficient access for both internal and external users

Governance, Risk & Compliance

• Define and enforce IAM policies, standards, and procedures
• Conduct access reviews and support audit readiness (e.g., SOX, GDPR, ISO)
• Monitor IAM environments for compliance and control effectiveness

Security Monitoring & Incident Response

• Monitor IAM logs and alerts to detect suspicious activity
• Support investigation and resolution of access-related security incidents

Integration & Collaboration

• Integrate IAM solutions with enterprise applications and systems
• Collaborate with IT, cybersecurity, and business teams to improve identity security posture

Automation & Continuous Improvement

• Automate IAM processes using scripting and APIs
• Improve operational efficiency and reduce manual intervention

Documentation & Knowledge Sharing

• Maintain clear and up-to-date documentation of IAM systems and processes
• Support knowledge sharing and training across teams

WHAT YOU’LL BRING TO THE TABLE

• Strong experience in Identity and Access Management within complex environments
• Hands-on expertise with Azure Entra ID, AWS IAM, Active Directory (On-Prem), and Okta (SSO, MFA, Provisioning, Federation).
• Deep understanding of IAM concepts including RBAC, PAM, authentication, and authorization
• Experience implementing zero-trust and least privilege access models
• Familiarity with compliance frameworks and security standards
• Strong problem-solving skills and ability to work across technical and business teams
• Experience with automation and scripting (e.g., PowerShell, Python)

EDUCATION + EXPERIENCE

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
• 5+ years of experience in Identity & Access Management
• Experience working in regulated environments (e.g., financial services) is an asset
• Relevant certifications (e.g., Microsoft Identity, Okta, or security certifications) are preferred

READY TO LEAD

If you’re passionate about securing identities, improving access controls, and building scalable IAM solutions, this is an opportunity to make a critical impact on enterprise security.

WHY JOIN MFSG TECHNOLOGIES INDIA?

Employee Benefits

We’re committed to supporting your health, well-being, and financial growth:

1. Competitive Employee Benefits

💠 Comprehensive Medical Coverage

• Includes employee, spouse, two children, and two parents.
• Coverage Amount: ₹6 lakhs annually.
• ₹5 lakhs top-up is available if you would like to opt, with thousand rupees per month deduction.

💠 Provident Fund Contribution

• Employer contribution of ₹1,800 per month to support long-term financial security.

💠 Performance-Based Incentives

• Annual bonus of up to 5% of base salary, based on performance and company success.

Reward & Recognition

⭐ Bucketlist Rewards Platform

• Recognizing outstanding contributions through a point-based rewards system.
• Redeem points for gift cards, experiences, and personalized perks that matter most to you.

⭐ Culture of Appreciation

• Celebrating milestones, achievements, and impact across teams.

Work-Life Balance & Flexibility

🏠 Flexible Work Model

• Currently remote, with a future transition to a hybrid model.

📅 Paid Leave Entitlements

• 15 Annual Leaves
• 6 Casual Leaves
• 12 Sick Leaves

If you're looking for a place where passion fuels purpose and where you can make a difference, we invite you to join us at MFSG Technologies (India) Private Limited. Together, let’s win and empower our customers. 

1. Learning & Career Growth

📚 Continuous Learning Culture

• Access to upskilling programs, mentorship, and professional development resources.
• Encouragement to learn, adapt, and innovate in a fast-growing financial services landscape.

🚀 Career Growth Opportunities

• Internal mobility programs to help employees advance in their careers.
• Support for leadership development, industry certifications, and specialized training.

🤝 Collaborative Knowledge Sharing

• Work with global teams, gaining exposure to international best practices.
• Encouragement to share ideas, experiment, and take ownership of impactful projects.

Overview:   We are seeking a seasoned Software Engineer L5 with strong reporting and data experience to design, build, and optimize scalable systems that support analytics and business intelligence and reporting capabilities for our clients. This role requires deep technical expertise, sound architectural judgment, and a passion for building reliable, high-performance solutions.

• Design distributed systems that are resilient and secure at scale from inception;
• Raise the engineering bar on scale, resiliency, security fundamentals via technical leadership and engineering excellence.
• Discover, review, and influence new and evolving design, architecture, and standards for building and delivering unique services and solutions;
• Investigate, design, and implement best-in-industry, innovative technologies that will expand Inovalon’s infrastructure through robust, scalable, adrenaline-fueled solutions;
• Develop and execute designs for complex systems backed by excellence, confidence, and thorough engineering analysis;
• Take ownership of ensuring detailed design, analysis, testing, and optimization;
• Provide mentorship onboarding new team members and enabling successful ramp up;
• Collaborate with other engineers, services across Inovalon, and external customers to understand requirements, have tight feedback loop that is data driven;
• Adhere to all confidentiality, HIPAA, regulatory, and other such policies, procedures, and requirements as outlined within Employer’s Operating Policies and Procedures in all ways and at all times with respect to any aspect of the data handled or services rendered in the scope of work.
• Maintain compliance with Inovalon’s policies, procedures and mission statement, and fulfill those responsibilities and/or duties that may be reasonably provided by Inovalon for the purpose of achieving operational and financial success.
• On Call Policy: Participate in an on-call rotation to support critical issues, including outside standard business hours (evenings, weekends, and holidays), ensuring timely response and resolution as per defined SLAs.

Job Requirements:

• 10+ years of experience in software engineering or related IT roles, working with complex computing platforms and modern technologies such as virtualization, distributed systems, and high-performance computing.
• Strong foundation in system architecture, design patterns, and automation, with a consistent focus on engineering excellence.
• Experience working with large data sets, including data pipelines, data access controls, and data warehouse platforms such as Snowflake or Databricks.
• At least 3 years of experience with the .NET platform using C# or another object-oriented programming language.
• Hands-on experience working in cloud environments, preferably AWS.
• Experience developing or supporting BI and reporting solutions, or a strong willingness to learn Power BI.
• Solid understanding of virtualization technologies and distributed architectures.
• Demonstrated ability to debug complex issues, optimize code, and participate in high-quality code reviews.
• Proven track record of improving system stability and performance through thoughtful design, testing strategies, monitoring, and controlled rollouts.
• Strong problem-solving skills with a focus on delivering scalable, maintainable, and elegant solutions.

Education:

• Bachelor's degree in computer science, Software Engineering, or Information Technology

Physical Demands and Work Environment:

• Sedentary work (i.e. sitting for long periods of time).
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force.
• Subject to inside environmental conditions.
• Travel for this position will include less than 10% locally usually for training purposes.