Senior DevSecOps Engineer - Cloud, Kubernetes & HIPAA

Fuze Health Inc.; California; On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental, vision, and group medical

401(k) retirement plan

Parental leave and generous PTO

Job summary

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to lead secure infrastructure and embed security into the engineering lifecycle across AWS/GCP environments.

You will define DevSecOps strategy, architect secure-by-design systems, and drive governance, IAM, and CI/CD security at scale. The role requires hands-on expertise in cloud-native architectures, IaC, containers, and HIPAA/SOC 2/HITRUST compliance.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero‑trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation) and Securing IaC pipelines.
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud architecture (AWS/GCP)

Kubernetes

CI/CD

IaC (Terraform, CloudFormation)

Application security

IAM / RBAC / zero-trust

Regulated environments (HIPAA, SOC 2,)

Scripting (Python, Go, Ruby)

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

CircleCI

Jenkins

Kubernetes

Job description

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to lead secure infrastructure and embed security into the engineering lifecycle across AWS/GCP environments.

You will define DevSecOps strategy, architect secure-by-design systems, and drive governance, IAM, and CI/CD security at scale. The role requires hands-on expertise in cloud-native architectures, IaC, containers, and HIPAA/SOC 2/HITRUST compliance.