DevSecOps Engineer – Secure Cloud & CI/CD for Healthcare

Xealth; Seattle (WA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Paid parental leave

Medical, dental, and vision premiums (

Home office stipend

401k match

Flexible time off

$500 yearly fitness stipend

Job summary

Xealth is seeking a DevSecOps Engineer to build and secure a cloud platform, integrating security into CI/CD, and enabling AI-augmented IaC workflows. You will collaborate with senior engineers and InfoSec to deliver reliable, scalable infrastructure in a HIPAA-regulated context.

You will own security-focused automation, contribute to Terraform-based infrastructure, and participate in on-call rotations while advancing security-first development practices.

Qualifications

• Experience building cloud infrastructure on AWS with IaC (Terraform).
• Familiarity with security scanning tools and HIPAA/SOC2 compliance is a plus.
• Ability to write automation scripts in Python or NodeJS.
• Experience with CI/CD pipelines and on-call incident response.

Responsibilities

• Own and improve automation scripts and pipelines to reduce manual toil.
• Support security tooling integration into delivery pipelines.
• Monitor infrastructure health and respond to alerts.
• Participate in security reviews and on-call rotations.
• Develop AI-augmented workflows to accelerate IaC authoring.

Skills

DevSecOps mindset

Cloud security awareness

Collaboration

Learning-oriented

Automation mindset

Tools

AWS

Terraform

Python

NodeJS

Semgrep

Checkov

Lacework

OWASP ZAP

Prometheus

Grafana

GitHub Actions

Jenkins

Kubernetes (EKS)

Job description

Xealth is seeking a DevSecOps Engineer to build and secure a cloud platform, integrating security into CI/CD, and enabling AI-augmented IaC workflows. You will collaborate with senior engineers and InfoSec to deliver reliable, scalable infrastructure in a HIPAA-regulated context.

You will own security-focused automation, contribute to Terraform-based infrastructure, and participate in on-call rotations while advancing security-first development practices.