Senior Cloud DevSecOps Engineer — Security Lead

Fuze Health Inc.; Pennsylvania; On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental insurance

Vision insurance

401(k) plan

Life insurance

Health savings account (HSA)

Flexible spending account (FSA)

Commuter benefits

Paid time off and holidays

Parental leave

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-driven infrastructure across AWS/GCP, and to embed secure coding and governance into the engineering lifecycle. This role requires hands-on expertise in cloud-native architectures, containers, and CI/CD, with experience in HIPAA/SOC 2 compliance and regulated environments.

You will mentor engineers, shape security strategy, and drive policy-as-code, zero-trust implementation, and secure IaC pipelines across our nationwide

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering in DevSecOps environments.
• Deep expertise in cloud architectures (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead IAM strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature security program in alignment with HIPAA, SOC 2, HITRUST, and other frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executives on security strategy and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud security

IAM / zero-trust

SRE / platform engineering

Python / Go scripting

Tools

Terraform

CloudFormation

GitHub Actions

Kubernetes

CI/CD pipelines

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-driven infrastructure across AWS/GCP, and to embed secure coding and governance into the engineering lifecycle. This role requires hands-on expertise in cloud-native architectures, containers, and CI/CD, with experience in HIPAA/SOC 2 compliance and regulated environments.

You will mentor engineers, shape security strategy, and drive policy-as-code, zero-trust implementation, and secure IaC pipelines across our nationwide