Senior DevSecOps Engineer: HIPAA Cloud Security Lead

Alto; Texas; Hybrid; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental

Vision

401k

Life insurance

Disability insurance

FSA/HSA

Parental leave

Flexible vacation

Job summary

Alto is seeking a Senior DevSecOps Engineer to advance security-first engineering across AWS/GCP, CI/CD, and IaC. You will define secure-by-design cloud architectures, implement policy‑as‑code, and partner with Engineering, Product, IT, and Compliance to ensure a compliant, scalable platform.

This hands‑on leadership role focuses on regulated healthcare environments, container security, identity management, and mentoring engineers to elevate secure coding and DevSecOps maturity.

Qualifications

• 6+ years of experience in software, infrastructure, or security engineering with DevSecOps focus.
• Cloud architecture expertise in AWS and/or GCP.
• Strong experience designing, building, and securing containerized Kubernetes environments.
• Hands-on with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins).
• IaC expertise (Terraform, CloudFormation) and securing IaC pipelines.
• Knowledge of application security principles, OWASP Top 10, secure coding practices.
• Understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI).
• Scripting/programming skills (Python, Go, Ruby).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, apps, and CI/CD workflows.
• Architect secure-by-design cloud-native systems across AWS/GCP.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security and governance controls.
• Automate security testing and compliance checks to reduce manual effort.
• Lead IAM strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Mentor engineers on secure coding and DevSecOps practices.

Skills

DevSecOps

Cloud architecture (AWS/GCP)

Kubernetes

CI/CD (GitHub Actions, GitLab CI, Cir​

IaC (Terraform, CloudFormation)

Application security (OWASP)

IAM / RBAC / zero-trust

HIPAA/SOC 2/HITRUST/PCI

Python/Go/Ruby

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

Terraform

CloudFormation

Kubernetes

Job description

Alto is seeking a Senior DevSecOps Engineer to advance security-first engineering across AWS/GCP, CI/CD, and IaC. You will define secure-by-design cloud architectures, implement policy‑as‑code, and partner with Engineering, Product, IT, and Compliance to ensure a compliant, scalable platform.

This hands‑on leadership role focuses on regulated healthcare environments, container security, identity management, and mentoring engineers to elevate secure coding and DevSecOps maturity.