Senior DevSecOps Engineer: Cloud Security Lead

Fuze Health Inc.; Elm (PA); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental plan

Vision plan

401(k) plan

Parental leave

Flexible vacation

Job summary

Fuze Health Inc. seeks a Senior DevSecOps Engineer to lead security across infrastructure and CI/CD in a regulated healthcare setting. You will architect secure cloud-native systems on AWS/GCP, implement policy-as-code, and mentor a team of engineers to embed security into the development lifecycle.

You will work with Security and Compliance to ensure HIPAA/SOC 2/HITRUST readiness and oversee secure IaC, IAM, and incident response practices as part of a cross-functional engineering organization.

Qualifications

• 6+ years in software, infrastructure, or security engineering with DevSecOps focus.
• Deep cloud experience with AWS and/or GCP.
• Experience building secure containerized/Kubernetes environments.
• Hands-on CI/CD systems experience (GitHub Actions, GitLab CI, CircleCI, Jenkins).
• IaC pipelines security expertise (Terraform, CloudFormation).
• Strong knowledge of application security principles and secure coding.
• Understanding of IAM, RBAC, and zero-trust models in regulated contexts.
• Experience in regulated environments (HIPAA, SOC 2, HITRUST, PCI).

Responsibilities

• Define and lead the DevSecOps vision across infra, apps, and CI/CD.
• Architect secure-by-design cloud-native systems on AWS/GCP.
• Establish security patterns, guardrails, and reference architectures.
• Design, maintain, and secure CI/CD pipelines and workflows.
• Drive IaC security and secure pipeline practices.
• Automate security testing and governance checks.
• Mentor engineers on secure coding and DevSecOps.
• Lead IAM strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Support audits with Security and Compliance teams.

Skills

DevSecOps leadership

Cloud architecture

Kubernetes security

CI/CD pipelines

IaC security

Secure coding

RBAC / IAM

Regulated environments

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

Terraform

CloudFormation

Job description

Fuze Health Inc. seeks a Senior DevSecOps Engineer to lead security across infrastructure and CI/CD in a regulated healthcare setting. You will architect secure cloud-native systems on AWS/GCP, implement policy-as-code, and mentor a team of engineers to embed security into the development lifecycle.

You will work with Security and Compliance to ensure HIPAA/SOC 2/HITRUST readiness and oversee secure IaC, IAM, and incident response practices as part of a cross-functional engineering organization.