Senior DevSecOps Engineer: Cloud Security Leader

Fuze Health Inc.; Arkansas City (KS); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental and vision insurance

401(k) retirement plan

Flexible vacation and paid time off

Job summary

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to join our Engineering organization.

You will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle. You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure Alto’s platform is secure, scalable, compliant, and resilient as we grow nationwide.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands‑on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero‑trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

Cloud architecture (AWS and GCP)

Kubernetes security

CI/CD tooling

IaC (Terraform, CloudFormation)

Scripting (Python, Go, Ruby)

Security principles (OWASP)

Tools

Terraform

CloudFormation

GitHub Actions

Jenkins

Job description

Fuze Health Inc. is seeking a Senior DevSecOps Engineer to join our Engineering organization.

You will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle. You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure Alto’s platform is secure, scalable, compliant, and resilient as we grow nationwide.