Secure Cloud DevSecOps Engineer for Healthcare SaaS

Medclinicx; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Med Clinic X is seeking a DevSecOps Engineer to weave security into our software development and infrastructure life cycle. You will design secure cloud environments, automate security workflows, and strengthen CI/CD security for healthcare platforms handling sensitive data.

Collaborating with engineering, DevOps, and security teams, you will ensure adherence to HIPAA and SOC2 requirements across US healthcare environments, including data-at-rest protections and regulated access controls.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, IT or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Responsibilities

• Design secure cloud environments and automate security workflows.
• Integrate SAST/SCA in CI/CD pipelines.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.
• Secure AWS, Azure, or GCP configurations.
• Configure IaC linting and drift scans.
• Deploy HIPAA and SOC2 compliance controls for data.
• Configure KMS encryption keys and TLS 1.3 endpoints.
• Advise developers on secure coding guidelines.
• Manage Kubernetes network policies and security controls.

Skills

DevOps experience

Security engineering

Cloud security

IAM security

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

GitHub Actions

GitLab CI/CD

Terraform / IaC

Kubernetes

Docker

Trivy/Checkov

Job description

Med Clinic X is seeking a DevSecOps Engineer to weave security into our software development and infrastructure life cycle. You will design secure cloud environments, automate security workflows, and strengthen CI/CD security for healthcare platforms handling sensitive data.

Collaborating with engineering, DevOps, and security teams, you will ensure adherence to HIPAA and SOC2 requirements across US healthcare environments, including data-at-rest protections and regulated access controls.