Senior DevSecOps Engineer: Cloud Security & Compliance

Fuze Health Inc.; Tennessee; On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental, Vision & Health plans

401(k) retirement plan

Paid parental leave

Flexible vacation & PTO

Commuter benefits

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to drive security across our cloud-native infrastructure. You will lead secure-by-design architecture in AWS/GCP, design automated pipelines, and enforce least-privilege access.

The role requires hands-on expertise in containers, Kubernetes, and IaC, with experience in HIPAA/SOC 2/HITRUST regulated settings. You will mentor engineers, elevate security posture across CI/CD, and partner with Compliance on audits while shaping scalable, compliant

Qualifications

• 6+ years in software/infrastructure/security engineering with DevSecOps
• Cloud architecture expertise across AWS/GCP
• Strong in containerized/Kubernetes environments
• Hands-on with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins)
• IaC expertise (Terraform, CloudFormation) and securing IaC pipelines
• Knowledge of secure coding, OWASP Top 10, and IAM/zero-trust models
• Experience in regulated environments (HIPAA, SOC 2, HITRUST, PCI)
• Scripting or programming in Python, Go, or Ruby

Responsibilities

• Define and lead the DevSecOps vision across infra, apps, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems in AWS/GCP.
• Establish security patterns, guardrails, and reference architectures.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive IaC security practices and automate governance controls.
• Automate security testing and compliance checks; reduce manual overhead.
• Lead identity and access management strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture; manage secrets and encryption.
• Partner with Security and Compliance for audits and remediation.
• Provide senior leadership during incidents and post-mortems.
• Mentor engineers on secure coding and DevSecOps practices.
• Influence leadership on security strategy and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud architecture

Containerization

Kubernetes

CI/CD pipelines

IaC (Terraform, CloudFormation)

Application security

IAM / zero-trust

Regulated environments

Scripting (Python/Go)

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

CircleCI

Jenkins

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to drive security across our cloud-native infrastructure. You will lead secure-by-design architecture in AWS/GCP, design automated pipelines, and enforce least-privilege access.

The role requires hands-on expertise in containers, Kubernetes, and IaC, with experience in HIPAA/SOC 2/HITRUST regulated settings. You will mentor engineers, elevate security posture across CI/CD, and partner with Compliance on audits while shaping scalable, compliant