DevSecOps Lead with Healthcare w2 only

Ensisinfo Inc; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Ensisinfo Inc is seeking a seasoned DevSecOps Lead to drive secure software delivery pipelines in Boston, MA. You will lead a hands‑on security focused team and integrate security into every stage of the development lifecycle within healthcare applications.

The role requires hands‑on leadership, deep knowledge of HIPAA compliance, and experience with CI/CD tools, cloud platforms, and IaC. You will collaborate across development, QA, and operations to strengthen security posture and incident

Qualifications

• Experience leading DevSecOps teams and secure SDLC practices.
• Strong knowledge of HIPAA compliance and healthcare security.
• Proficiency with CI/CD tools (Jenkins, GitLab CI, Azure DevOps).
• Experience with cloud platforms (AWS, Azure, GCP) and containers (Docker, Kubernetes).
• Familiarity with IaC tools such as Terraform or Ansible.

Responsibilities

• Lead and mentor a DevSecOps team, driving CI/CD security and automation best practices.
• Design and maintain secure infrastructure and deployment pipelines for healthcare apps.
• Ensure HIPAA and related regulatory compliance across systems.
• Perform threat modeling, vulnerability assessments, and security reviews.
• Collaborate across dev, QA, and ops to embed security in the SDLC.
• Monitor, detect, and respond to security incidents in cloud/on‑prem environments.
• Evaluate and implement security tooling (SAST/DAST, container security, secrets management).

Job description

About the Role:

Ensisinfo Inc is looking for a seasoned DevSecOps Lead to join our growing team in Boston, MA. This is an exciting opportunity to drive secure software delivery pipelines within the dynamic healthcare industry, where your expertise will directly impact patient data security and compliance. If you're a hands-on leader passionate about integrating security into every stage of the development lifecycle, we want to hear from you!

Responsibilities:

• Lead and mentor a DevSecOps team, driving best practices in CI/CD pipeline security and automation
• Design, implement, and maintain secure infrastructure and deployment pipelines for healthcare applications
• Ensure compliance with healthcare regulations including HIPAA, HITECH, and other relevant standards
• Conduct threat modeling, vulnerability assessments, and security code reviews across development teams
• Collaborate with development, QA, and operations teams to embed security throughout the SDLC
• Monitor, detect, and respond to security incidents within cloud and on-premise environments
• Evaluate and implement security tooling including SAST, DAST, container security, and secrets management

Requirements:

• Minimum 2 years of experience in a DevSecOps Lead or senior-level role
• Mandatory experience in the healthcare domain with strong knowledge of HIPAA compliance
• Proficiency in CI/CD tools such as Jenkins, GitLab CI, or Azure DevOps
• Hands-on experience with cloud platforms (AWS, Azure, or GCP) and container technologies (Docker, Kubernetes)
• Strong knowledge of security frameworks, vulnerability management, and penetration testing
• Experience with Infrastructure as Code (IaC) tools such as Terraform or Ansible
• Excellent communication and leadership skills with the ability to collaborate cross-functionally

About Us:

Ensisinfo Inc is a technology solutions company dedicated to delivering innovative and secure IT services across highly regulated industries, with a strong focus on healthcare. Our clients trust us to protect sensitive data and build resilient systems that power critical operations. At Ensisinfo Inc, employees thrive in a collaborative environment that values expertise, continuous learning, and meaningful work that makes a real difference.