Remote Senior DevSecOps Engineer: Cloud Security & HIPAA

Fuze Health Inc.; Crystal Bay (NV); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Dental & vision

401(k) plan

Group life insurance

AD&D insurance

FSAs/HSA

Commuter benefits

STD & LTD insurance

Spouse life insurance

Legal insurance

Employee assistance program

Home health testing kits

Fertility discount program

Flexible vacation time

Paid sick time

Paid holidays

Floating holidays

Parental leave

Lifestyle Spending Account

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure and CI/CD across AWS/GCP. You will architect secure cloud-native systems, establish guardrails, and drive policy-driven governance to ensure HIPAA/SOC2/HITRUST alignment while mentoring engineering teams.

You will design secure pipelines, automate security testing, and collaborate with IT, Product, and Compliance to advance a resilient security program nationwide.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Strong scripting or programming skills (Python, Go, Ruby, or similar).
• Experience building DevSecOps owned resources from early-stage to scale.
• Background in site reliability engineering (SRE) or platform engineering.
• Security certifications such as CISSP, CISM, CCSP, or cloud security certifications (AWS/GCP).
• Experience with observability platforms and integrating security telemetry into monitoring systems.

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud security

AWS/GCP

Kubernetes

IaC

Security testing

Policy-as-code

SRE

Python

Go

Ruby

CISSP

CISM

CCSP

Observability

Tools

Terraform

CloudFormation

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure and CI/CD across AWS/GCP. You will architect secure cloud-native systems, establish guardrails, and drive policy-driven governance to ensure HIPAA/SOC2/HITRUST alignment while mentoring engineering teams.

You will design secure pipelines, automate security testing, and collaborate with IT, Product, and Compliance to advance a resilient security program nationwide.