Senior DevSecOps Engineer - Cloud, IAM & Security

Fuze Health Inc.; Florida; On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental and vision

401(k) plan

Paid time off

Parental leave

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to join our Engineering team. You will lead security-focused infrastructure and embed security into the software lifecycle, shaping architectures and CI/CD practices across AWS/GCP and Kubernetes environments.

You will mentor engineers, establish secure-by-design patterns, and partner with Compliance to meet HIPAA and SOC 2 requirements as we scale nationwide.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps leadership

Cloud security (AWS/GCP)

Kubernetes security

CI/CD (GitHub Actions, GitLab, Circle|

IaC (Terraform, CloudFormation)

Security compliance (HIPAA, SOC 2, HIT

Scripting (Python/Go)

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to join our Engineering team. You will lead security-focused infrastructure and embed security into the software lifecycle, shaping architectures and CI/CD practices across AWS/GCP and Kubernetes environments.

You will mentor engineers, establish secure-by-design patterns, and partner with Compliance to meet HIPAA and SOC 2 requirements as we scale nationwide.