Prudhvi Raju Mudunuri is a DevOps and platform architect specializing in compliance-driven transformation and regulated enterprise automation. With over eight years of experience in federally regulated and high-compliance environments, he has developed approaches to secure toolchain architecture and modernize enterprise-scale platforms for organizations operating in complex regulatory landscapes. His work focuses on architecting compliance-first DevOps ecosystems that integrate security, governance, and scalability. He has led enterprise modernization efforts, including GitLab CI/CD transformations and clustered Atlassian Data Center implementations, while maintaining operational continuity and meeting regulatory requirements in mission-critical environments. Prudhvi has contributed automation frameworks for avionics software development and federal project delivery using Groovy, Python, and REST APIs. His expertise encompasses high-availability architecture and credential-management systems that support the secure handling of sensitive data across distributed environments. He holds a Master’s degree in Computer Science from Northwestern Polytechnic University and a Bachelor’s degree in Electronics and Communication Engineering from GITAM University.  

Title: Compliance-as-Code Architecture: Automated Governance for Regulated Biomedical Infrastructure                                                                                                                                               Abstract:Healthcare and biomedical research institutions face an architectural challenge: DevOps automation is designed for deployment speed, while regulated environments require auditability, traceability, security, and controlled change management. Many automation initiatives become dependent on manual reviews because compliance is treated as documentation overhead rather than an integrated operational governance system. This session presents a compliance-as-code architectural framework that converts regulatory and organizational requirements into version-controlled, machine-executable controls. The framework incorporates declarative policy enforcement, automated configuration-drift detection, infrastructure-as-code validation, and continuous compliance-evidence generation. It also demonstrates how static code analysis, container-image validation, configuration verification, and automated policy gates can be integrated throughout the software-delivery lifecycle. Using hybrid biomedical computing environments as a practical context, the session explains how organizations can maintain workload segregation, traceability, and consistent security controls across on-premises and cloud platforms. Continuous reconciliation helps identify drift-driven vulnerabilities, while automated validation prevents non-compliant changes from reaching regulated systems. Attendees will gain practical architectural patterns for reducing manual compliance overhead, improving audit readiness, and accelerating secure software delivery. Although presented in the context of biomedical infrastructure, the framework is also applicable to other highly regulated environments, including government, financial services, and defense.