Secure Cloud DevSecOps Engineer for Healthcare SaaS

Medclinicx; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Med Clinic X in Austin seeks a DevSecOps Engineer to weave security into software development and cloud operations, ensuring HIPAA-compliant, resilient healthcare platforms.

You will automate security controls, enable secure CI/CD, manage IAM, encryption, and IaC practices across AWS/GCP/Azure, collaborating with engineering and security teams.

This role requires a security-minded builder who can translate compliance into technical guardrails and guide developers toward secure coding.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Responsibilities

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP cloud configurations.
• Configure infrastructure as code (IaC) linting and drift scans.
• Advise developer teams on secure coding guidelines and Kubernetes network policies.

Skills

DevSecOps

Cloud security

CI/CD security

GitHub Actions

GitLab

Container security

IaC security

Education

Bachelor's degree in CS, Cybersecurity, IT, or related field

Tools

Trivy

Checkov

Job description

Med Clinic X in Austin seeks a DevSecOps Engineer to weave security into software development and cloud operations, ensuring HIPAA-compliant, resilient healthcare platforms.

You will automate security controls, enable secure CI/CD, manage IAM, encryption, and IaC practices across AWS/GCP/Azure, collaborating with engineering and security teams.

This role requires a security-minded builder who can translate compliance into technical guardrails and guide developers toward secure coding.