Note: The job is a remote job and is open to candidates in USA. Allia Health Group is committed to redefining industry trends in anti-aging solutions. They are seeking a dedicated Web Operations (WebOps) Engineer to manage and secure their web infrastructure, ensuring compliance with HIPAA and SOC 2 standards while maintaining high performance and security across all digital properties.
Responsibilities
- Own and manage DNS and domain configurations across registrars, ensuring all changes (MX, TXT, CNAME) are security-validated before execution
- Deploy and maintain standardized WordPress environments with hardened configurations aligned to security guidelines
- Execute timely updates for WordPress core, plugins, and themes within defined maintenance windows
- Respond to and remediate web-based vulnerabilities identified by security scanning tools
- Manage CDN and WAF configurations (e.g., Cloudflare) to mitigate DDoS attacks and ensure secure, high-availability performance
- Oversee SSL/TLS certificate lifecycle management to ensure continuous compliance and audit readiness
- Ensure all web properties are documented and maintained within GRC systems for HIPAA and SOC 2 audit requirements
- Collaborate with marketing teams to safely implement tracking pixels and analytics tools without compromising security or privacy
- Work closely with Cloud Security teams to implement edge security controls and enforce web application protection policies
- Monitor and maintain overall web infrastructure health, performance, and security posture
Skills
- Bachelor's degree in Information Technology, Cybersecurity, Web Systems, or a related field
- Equivalent combination of education and 5+ years of specialized WebOps or Site Reliability Engineering experience may be considered
- Experience managing WordPress in regulated environments such as healthcare or finance
- Strong understanding of DNS management, including DNSSEC, SPF, DKIM, and DMARC
- Experience with CDNs and web security platforms such as Cloudflare or Akamai
- Strong knowledge of Linux-based hosting environments and SSL/TLS management
- Experience collaborating with Security Operations or Cloud Security teams
- Strong troubleshooting, communication, and incident response skills
- Google Professional Cloud Security Engineer Certification
- Experience with identity-aware proxies and edge security architectures
- Cloudflare or equivalent edge security/WAF certification
- Experience supporting HIPAA and SOC 2 compliant web environments
- CompTIA Security+ certification
Benefits
- Full benefits package including medical, vision, dental
- 401(k) with company match
- PTO
- Flex days
- Holidays
- Shift schedule is Monday through Friday from 8:00 AM to 5:00 PM; however, hours may be adjusted based on business needs, and flexibility in availability is expected to support teams and operational demands
Company Overview