Senior DevSecOps Engineer: Cloud & Security Lead

Fuze Health Inc.; Central City (CO); Remote; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental & Vision

Medical plans

401(k)

Paid time off

Parental leave

FSA/HSA

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure in our nationwide operations. You will define DevSecOps strategy, secure cloud architectures, and partner with engineering teams to embed security across the lifecycle.

This role requires hands-on expertise with AWS/GCP, Kubernetes, IaC (Terraform, CloudFormation), and CI/CD tooling, plus experience in HIPAA or similar regulated environments.

Qualifications

• 6+ years in software/infrastructure/security with DevSecOps focus.
• Cloud architecture in AWS and/or GCP.
• Experience securing containerized and Kubernetes environments.
• Hands-on with CI/CD systems like GitHub Actions, GitLab CI, CircleCI, Jenkins.
• IaC knowledge with Terraform and CloudFormation; secure IaC pipelines.
• Strong knowledge of IAM, RBAC, zero-trust and encryption.
• Experience in regulated environments (HIPAA, SOC 2, HITRUST, PCI).
• Strong scripting in Python/Go/Ruby.

Responsibilities

• Define and lead the DevSecOps vision across infra, application, and CI/CD ecosystems.
• Architect secure cloud-native systems across AWS and/or GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud architecture

Kubernetes

CI/CD

Scripting (Python/Go)

Security principles

Regulated environments

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

CircleCI

Jenkins

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure in our nationwide operations. You will define DevSecOps strategy, secure cloud architectures, and partner with engineering teams to embed security across the lifecycle.

This role requires hands-on expertise with AWS/GCP, Kubernetes, IaC (Terraform, CloudFormation), and CI/CD tooling, plus experience in HIPAA or similar regulated environments.