Senior DevSecOps Engineer — HIPAA Cloud Security Leader

Fuze Health Inc.; Town of King (WI); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental coverage

Vision coverage

Medical plans

401(k)

Paid time off

Parental leave

Commuter benefits

Job summary

Fuze Health in the United States is seeking a Senior DevSecOps Engineer to join the Engineering organization. You will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle.

You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure our platform is secure, scalable, compliant, and resilient as we grow nationwide.

Qualifications

• 6+ years in software, infrastructure, or security engineering, with DevSecOps experience.
• Cloud architecture in AWS and/or GCP.
• Experience with containerized and Kubernetes environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins).
• Infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust, and encryption best practices.
• Experience in regulated environments (HIPAA, SOC 2, HITRUST, PCI).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices and IaC pipelines.
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience.
• Design and maintain Kubernetes resources for internal and external use.
• Lead IAM strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation and zero-trust architectures.
• Support and mature security program in alignment with HIPAA, SOC 2, HITRUST, PCI.
• Partner with Security and Compliance on audits and remediation.
• Provide senior-level leadership during incidents and root cause analysis.
• Mentor engineers on secure coding and DevSecOps practices.
• Influence engineering leadership on security strategy and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

DevSecOps

Cloud security

Kubernetes

CI/CD

IaC

Python

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

Terraform

CloudFormation

Job description

Fuze Health in the United States is seeking a Senior DevSecOps Engineer to join the Engineering organization. You will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle.

You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure our platform is secure, scalable, compliant, and resilient as we grow nationwide.