About the company:

Orange Health is India’s leading on-demand diagnostics lab for urban Indian consumers and is positioned as the fastest diagnostics lab in India. We were recognized as the Diagnostics Startup of the Year 2025.

Launched in January 2021, Orange Health Labs is amongst the most loved brands in the healthcare sector, with over 30,000 reviews and the highest rating on Google for all its facilities across the country, and an NPS close to 90!

Orange Health Labs is among the best places to work, with a team of 1,000+ people across the company. We believe in treating colleagues with respect and investing in their growth for the long term. You can learn more about our work culture on our careers page and LinkedIn page.

Our vision is supported by some of the world’s leading investors like Accel, General Catalyst, Y Combinator, Bertelsmann India, Amazon, and other marquee names. We have been recognised as a Future Unicornfor two consecutive years by Hurun India.

About the Role:

The ideal candidate will have a strong background in application and cloud security, be capable of mentoring junior engineers, and have expertise in optimizing our platform's infrastructure.

Why join us?

• Market competitive salary with bi-annual increments.

• Great stock option policy with rights to exercise 10 years post exit.

• Well known for a collaborative culture with a top 10% rating on Glass door.

• Fastest-growing health tech company in India with marquee investors.

• Opportunity to build a product that will have a significant impact on people's health and well-being.

Roles and Responsibilities:

• Cloud and Application Security: Implement and improve cloud and application security practices to ensure the platform's resilience.

• Networking: Configure and manage networking components such as VPN, NAT, VPC, ensuring secure connectivity between Cloud and branch networks.

• Monitoring & Logging: Leverage tools like New Relic, Graylog, Sentry, and Bugsnag for performance monitoring, logging, and error tracking.

• Automation: Enhance automation in infrastructure provisioning, monitoring, and recovery using tools like Docker, Kubernetes, and Terraform.

• Database Management: Manage and optimize databases such as PostgreSQL, MySQL, and Redis.

• Own the security stages of CI/CD: SAST, secret scanning, and dependency and container scanning, with policies that block merges and image pushes rather than just reporting.

• Own the container base-image pipeline: keep the Go, Python, and Node runtime bases patched, add a CVE gate to every build, and drive application Dockerfiles back to current bases.

• Enforce ECR hygiene: enforce tag immutability, image signing, lifecycle policies, and scan-result triage so Inspector counts reflect real risk.

• Run the quarterly access reviews as an engineering task with evidence, not a spreadsheet exercise.

Skills We are looking For:

• 1 - 2.5 years of experience in a DevOps or related engineering role.

• Strong hands-on experience with AWS (EC2, RDS, S3, Lambda, etc.) and exposure to GCP services (Firebase, RTDB).

• Proficiency in containerization and orchestration using Docker and Kubernetes.

• Knowledge of relational databases like PostgreSQL and MySQL, and NoSQL databases like Redis.

• Experience with cloud and application security best practices.

• Solid Kubernetes and Docker: you can read a Dockerfile and a Helm chart and say what is wrong with it.

• Experience wiring security scanners into CI/CD and making them enforce, not just report. Trivy, Semgrep, SonarQube, GitLeaks, or equivalents.

• Scripting fluency in Python or Go, and comfortable with Bash. You should be able to write the automation, not just configure a vendor tool.

• Working knowledge of AWS Cloud Infrastructure

• Understanding of OWASP Top 10 and API-specific risk