DevSecOps Engineer: Secure Cloud & Automation Leader

OpenTalent; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Virta Health is seeking a DevSecOps Engineer to strengthen application security and embedding security into the development lifecycle across the platform. You will collaborate with security and engineering teams to mature security controls in GCP and Kubernetes, while building automated tooling for vulnerability management and compliance.

The role emphasizes designing secure systems, promoting a security-conscious culture, and ensuring robust auditing and incident readiness within a health-tech

Qualifications

• Proven experience securing cloud-native applications and infrastructure.
• Experience integrating security into the software development lifecycle (shift-left).
• Strong understanding of IAM, network security, and policy enforcement.

Responsibilities

• Secure Virta's applications and platform across teams.
• Integrate security into development lifecycles and automate controls.
• Improve security design and governance in GCP and Kubernetes environments.
• Refine IAM strategies with least-privilege access and robust auditing.
• Develop and communicate practical security standards and policies.
• Lead vulnerability management and incident response readiness.
• Promote security awareness across engineering teams.

Skills

Security design

Kubernetes

GCP

IAM

Automation

Vulnerability management

Incident response

Secure SDLC

Cloud security

Tools

Kubernetes

Google Cloud Platform (GCP)

CI/CD tooling

IAM tooling

Job description

Virta Health is seeking a DevSecOps Engineer to strengthen application security and embedding security into the development lifecycle across the platform. You will collaborate with security and engineering teams to mature security controls in GCP and Kubernetes, while building automated tooling for vulnerability management and compliance.

The role emphasizes designing secure systems, promoting a security-conscious culture, and ensuring robust auditing and incident readiness within a health-tech