DevSecOps Lead: Secure Healthcare Pipelines & Compliance

Ensisinfo Inc

Boston (MA)

On-site

USD 140,000 - 190,000

Full time

3 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Ensisinfo Inc is seeking a seasoned DevSecOps Lead to drive secure software delivery pipelines in Boston, MA. You will lead a hands‑on security focused team and integrate security into every stage of the development lifecycle within healthcare applications.

The role requires hands‑on leadership, deep knowledge of HIPAA compliance, and experience with CI/CD tools, cloud platforms, and IaC. You will collaborate across development, QA, and operations to strengthen security posture and incident

Qualifications

Experience leading DevSecOps teams and secure SDLC practices.
Strong knowledge of HIPAA compliance and healthcare security.
Proficiency with CI/CD tools (Jenkins, GitLab CI, Azure DevOps).
Experience with cloud platforms (AWS, Azure, GCP) and containers (Docker, Kubernetes).
Familiarity with IaC tools such as Terraform or Ansible.

Responsibilities

Lead and mentor a DevSecOps team, driving CI/CD security and automation best practices.
Design and maintain secure infrastructure and deployment pipelines for healthcare apps.
Ensure HIPAA and related regulatory compliance across systems.
Perform threat modeling, vulnerability assessments, and security reviews.
Collaborate across dev, QA, and ops to embed security in the SDLC.
Monitor, detect, and respond to security incidents in cloud/on‑prem environments.
Evaluate and implement security tooling (SAST/DAST, container security, secrets management).