Senior DevSecOps Engineer - Cloud & Security

Fuze Health Inc.; Clayton (NC); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Full benefits package

Parental leave

401(k) and retirement plans

Job summary

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to join our Engineering organization. You will lead secure-by-design cloud-native systems and governance, partnering across teams to ensure secure, compliant, and scalable infrastructure as we grow nationwide.

The role requires hands-on expertise in cloud security, IaC, containers, and regulatory compliance within a healthcare context. Location: US-based, with full-time employment and comprehensive benefits.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud architecture

Kubernetes

CI/CD

IaC

IAM

Security principles

Python/Go

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

Terraform

CloudFormation

OWASP

Job description

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to join our Engineering organization. You will lead secure-by-design cloud-native systems and governance, partnering across teams to ensure secure, compliant, and scalable infrastructure as we grow nationwide.

The role requires hands-on expertise in cloud security, IaC, containers, and regulatory compliance within a healthcare context. Location: US-based, with full-time employment and comprehensive benefits.