DevSecOps Engineer

Medclinicx; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Med Clinic X in Austin seeks a DevSecOps Engineer to weave security into software development and cloud operations, ensuring HIPAA-compliant, resilient healthcare platforms.

You will automate security controls, enable secure CI/CD, manage IAM, encryption, and IaC practices across AWS/GCP/Azure, collaborating with engineering and security teams.

This role requires a security-minded builder who can translate compliance into technical guardrails and guide developers toward secure coding.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Responsibilities

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Configure infrastructure as code (IaC) linting and drift scans.
• Advise developer teams on secure coding guidelines and Kubernetes network policies.

Skills

DevSecOps

Cloud security

CI/CD security

GitHub Actions

GitLab

Container security

IaC security

Education

Bachelor's degree in CS, Cybersecurity, IT, or related field

Tools

Trivy

Checkov

Job description

Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.

Our mission is to build healthcare technology that combines innovation with strong security, reliability, and compliance.

Job Overview

We are seeking a DevSecOps Engineer to integrate security practices into our software development and infrastructure processes.

In this role, you will design secure cloud environments, automate security workflows, improve CI/CD security, and protect healthcare applications handling sensitive data. You will work closely with engineering, DevOps, and security teams to ensure Med Clinic X platforms meet high standards of security and compliance for US healthcare organizations.

Responsibilities

Security Engineering & Automation

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.
• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via enforced TLS 1.3 endpoints.
• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

Qualifications

Required

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Preferred

• Experience in US healthcare or healthcare SaaS environments.
• Knowledge of HIPAA, SOC 2, or healthcare compliance audits.
• Experience with cloud security scanning tools (Trivy, checkov, etc.).
• Background in application security or pen-testing.
• Relevant security certifications (Security+, CISSP, AWS Security).

Why Join Med Clinic X?

At Med Clinic X, you will help protect the technology infrastructure behind modern healthcare. You will:

• Secure healthcare platforms used by US organizations
• Build automated security systems
• Work with cloud and engineering teams

Technical Core

CI/CD Security Scanning IAM Least Privilege KMS / TLS Encryption Kubernetes & Docker Sec Terraform / IaC Security Vulnerability Assessment

Systems You Will Work With

SaaS Security Gateways

Integrate static application scanning (SAST) and vulnerability audits directly into pipeline builds.

Cloud Identity Hardening

Deploy lease-privilege IAM roles and automate credentials rotation policies across multi-tenant infrastructures.

Audit Kubernetes namespace boundaries, registry image signatures, and network access policies.

PHI Data DLP Triggers

Implement regex-based Data Loss Prevention filters sanitizing logs before cloud storage ingestion.

Configure automated KMS keys and TLS 1.3 handshakes across all transactional database services.

Vulnerability Incident Triage

Audit alerts originating from cloud configurations, dependency lists, and system runtime checks.