DevSecOps Engineer: Secure Cloud & Compliance for Healthcare

Med Clinic X Inc.; Austin (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

Med Clinic X is seeking a DevSecOps Engineer to weave security into our software development and deployment practices. You will design secure cloud environments, automate security workflows, and strengthen CI/CD security for healthcare platforms handling sensitive data.

You will collaborate with engineering, DevOps, and security teams to implement IAM, IaC checks, and DLP measures, ensuring HIPAA and SOC 2 compliance across systems and pipelines.

Qualifications

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Responsibilities

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Implement IAM role definitions using Least Privilege principles.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.
• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via TLS 1.3 endpoints.
• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

Skills

DevOps

Security engineering

Cloud security

CI/CD pipelines

Container security

Infrastructure as Code

Education

Bachelor's in CS/Cybersecurity/IT

Tools

GitHub Actions

GitLab

Trivy

Checkov

Terraform

Job description

Med Clinic X is seeking a DevSecOps Engineer to weave security into our software development and deployment practices. You will design secure cloud environments, automate security workflows, and strengthen CI/CD security for healthcare platforms handling sensitive data.

You will collaborate with engineering, DevOps, and security teams to implement IAM, IaC checks, and DLP measures, ensuring HIPAA and SOC 2 compliance across systems and pipelines.