DevOps Lead

ABOUT TRUDATARX

TruDataRx, Inc. uses objective clinical data to help clients improve the clinical efficacy and reduce the costs of pharmacy benefits for its members. We are independent from all players in the pharmaceutical manufacturing and distribution industries, enabling us to best serve our clients. We value the following characteristics in our team members:

• Outward Mindset – foundation of our culture, which influences the right behaviors, that leads to results
• Entrepreneurial – the ability to get things done with resources you don’t control
• Humility – deep comfort in knowing when you don’t know and asking questions
• Collaboration – we always give benefit of doubt that each person has something to contribute

Position Summary

The DevOps Lead is a hands-on technical leader responsible for overseeing TruDataRx’s DevOps and IT functions, driving all security and compliance programs, and ensuring the reliability, security, and scalability of the company’s cloud infrastructure. This role owns the organization’s SOC2 and HIPAA compliance posture and manages technical infrastructure contractors and the third-party IT vendor responsible for day-to-day IT operations. The ideal candidate is equally comfortable setting strategic direction and rolling up their sleeves to execute in a fast-paced, resource-conscious environment.

Essential Functions

• DevOps Leadership: Own and evolve the DevOps function, including CI/CD pipelines (GitHub Actions, Azure DevOps), container orchestration (Kubernetes), and infrastructure-as-code (Terraform) across Microsoft Azure and AWS environments. Actively contribute hands-on, including supporting the ongoing AWS-to-Azure migration.
• Security & Compliance: Serve as the internal owner of TruDataRx’s SOC2 and HIPAA compliance programs, including leading annual SOC2 audit cycles, maintaining controls, and driving continuous security improvements across the organization.
• Security Incident Response: Lead the detection, containment, response, and post-mortem process for security incidents. Develop, maintain, and regularly test the company’s incident response plan.
• IT Vendor Oversight: Manage the third-party IT vendor responsible for laptop provisioning, basic account management, and day-to-day IT support. Ensure all vendor activities align with TruDataRx’s technical, security, and compliance roadmaps.
• Infrastructure Cost Optimization: Own cloud infrastructure budgeting across Azure and AWS. Monitor spend, identify optimization opportunities, and drive cost efficiency without compromising reliability or security.
• Vendor Relationship Management: Evaluate, select, and manage infrastructure and security tooling vendors. Hold third parties accountable to contractual obligations, SLAs, and TruDataRx’s compliance standards.
• Compliance Operations: Drive IT adherence to critical healthcare and data security frameworks, specifically maintaining HIPAA and SOC 2 compliance across all systems.
• Cross-functional Collaboration: Partner with Engineering, Product, and executive leadership to align infrastructure strategy with business objectives. Communicate infrastructure risks, priorities, and progress clearly to non-technical stakeholders.
• Other duties as required.*

*This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.