Secure DevSecOps Engineer - CI/CD & Cloud Security

Viva-Health; Birmingham (AL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health Coverage

401(k) Plan

PTO

Holidays

Job summary

VIVA HEALTH, part of the UAB Health System, seeks an Information Security Development Engineer in Birmingham, AL to partner with software, infra, and compliance teams to integrate security across the SDLC, design and maintain secure CI/CD pipelines, IaC, monitoring, threat detection, and compliance controls, especially HIPAA/HITECH.

This role will proactively identify and mitigate risks, improve security posture, and enable rapid, reliable delivery of software and infrastructure changes,

Qualifications

• Bachelor's degree in CS or Information Security (or equivalent experience).
• 4+ years in DevSecOps/SRE with a security focus.
• Experience with AWS and Azure cloud security best practices.
• Build and manage CI/CD pipelines with integrated security controls.
• Hands-on with Terraform, CloudFormation, or ARM/Bicep.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines across apps, APIs, and cloud platforms.
• Develop and manage infrastructure as code with security-first principles.
• Integrate automated security testing throughout the SDLC (SAST/DAST, container scanning).
• Embed secure development practices, threat modeling, and security review gates.
• Monitor, detect, and respond to security vulnerabilities and incidents; perform root-cause analyses.
• Support regulatory compliance and contribute to audits and controls (HIPAA, HITECH, CMS).
• Conduct risk assessments and security architecture reviews; promote security awareness.

Education

Bachelor's Degree in Computer Science or Information Security

4+ years experience in DevSecOps/SRE with security focus

Cloud platforms AWS & Azure

CI/CD pipelines with security controls

Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep)

Security tooling (SAST/DAST, container scanning)

Tools

Terraform

CloudFormation

ARM/Bicep

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

Job description

VIVA HEALTH, part of the UAB Health System, seeks an Information Security Development Engineer in Birmingham, AL to partner with software, infra, and compliance teams to integrate security across the SDLC, design and maintain secure CI/CD pipelines, IaC, monitoring, threat detection, and compliance controls, especially HIPAA/HITECH.

This role will proactively identify and mitigate risks, improve security posture, and enable rapid, reliable delivery of software and infrastructure changes,