Job Description & Details
This is a heavy-duty Staff SRE role built for someone who knows how to balance modern cloud-native infrastructure with the brutal realities of healthcare compliance. You won't just be shipping code fast; you'll be building bulletproof pipelines and observability stacks that can pass FDA GxP and HITRUST audits without breaking a sweat.
What You'll Actually Be Doing
Your day-to-day will revolve around architecting scalable Kubernetes clusters on AWS, GCP, or Azure while baking compliance controls directly into Terraform and Ansible modules. You will spend a good chunk of your time setting up SLIs, SLOs, and SLAs, managing the full incident lifecycle, and ensuring that protected health information (PHI) remains entirely secure. Cross-functional collaboration is huge here—you'll be working closely with quality assurance and regulatory teams to ensure audit readiness is baked into every layer of the infrastructure.
The Core Tech Stack
You need deep, production-level fluency in Kubernetes, Terraform, Helm, and major cloud providers like AWS, Google Cloud, or Azure. Because this is a regulated space, your automation background in Python, Bash, or Go needs to be rock-solid, and you should be intimately familiar with monitoring tools like Datadog, Prometheus, Grafana, and SIEM platforms like Splunk. Knowing how to map these tools to FDA GxP, HITRUST, and HIPAA requirements is the ultimate differentiator for this position.
Interview Expectations
The hiring managers are going to probe deeply into your incident management and compliance background. Expect a scenario-based question about how you would handle a production security incident involving PHI while maintaining strict audit logs for the FDA. They aren't just looking for a technical fix; they want to see your structured approach to postmortems, documentation, and cross-functional communication under pressure. You should also be prepared for a deep dive into IaC state management and how you enforce security policies at the pipeline level.
Application Advice
To get past the ATS, your resume needs to explicitly feature keywords like FDA GxP, HITRUST, Kubernetes, Terraform, and SIEM log aggregation. Don't just list tools—highlight the scale of the regulated environments you've managed and specific instances where you successfully led incident response or audit readiness initiatives in the health-tech or life sciences space.