Cutting HIPAA deploy time 70% with GitLab parent/child pipelines and an Ansible control plane

A redacted engineering write-up: decomposing a monolithic GitLab pipeline into parent/child stages, Ansible-driven HIPAA control validation across 32+ hosts, and evidence emission that turns audits into queries.

mercoledì 3 giugno 2026 New tab

1,308 words~6 min read

Parent/child first. Evidence emission second. Ansible control plane third.

Every release was a manual evidence collection exercise. The pipeline was the bottleneck.

This is a redacted write-up of a real engagement: rebuilding a healthcare SaaS company's CI/CD pipeline across a fleet of Linux hosts on AWS.

The context

The engineering team had grown faster than the pipeline architecture had evolved. What started as a single-stage GitLab job for a small team had been extended, patched, and worked around as the team scaled past the patterns the original pipeline was built for.