Senior DevSecOps Engineer: Cloud, Security & Compliance

Fuze Health Inc.; Arizona; On-site; USD 128,000 - 160,000; Full time

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to join our Engineering organization. We build and operate secure, compliant systems across national pharmacy locations, shaping architecture and infrastructure at scale for patient health and safety.

The role demands deep cloud, container, and security expertise to embed secure design into the full development lifecycle and to lead cross-functional security initiatives in a regulated healthcare environment.

Qualifications

• 6+ years of software, infrastructure, or security engineering with a DevSecOps focus.
• Cloud architecture experience in AWS and/or GCP.
• Experience designing, building, and securing containerized and Kubernetes environments.
• Hands-on with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins).
• IaC expertise (Terraform, CloudFormation) and secure IaC pipelines.
• Strong knowledge of application security, OWASP Top 10, and secure coding practices.
• IAM, RBAC, zero-trust, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI).
• Scripting/programming: Python, Go, Ruby, or similar.

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

Cloud architecture

Kubernetes

CI/CD pipelines

Terraform

Security engineering

IAM

Python/Go

HIPAA compliance

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

CloudFormation

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to join our Engineering organization. We build and operate secure, compliant systems across national pharmacy locations, shaping architecture and infrastructure at scale for patient health and safety.

The role demands deep cloud, container, and security expertise to embed secure design into the full development lifecycle and to lead cross-functional security initiatives in a regulated healthcare environment.