Senior DevSecOps Engineer - Remote Cloud Security (HIPAA)

Fuze Health Inc.; Central City (CO); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Dental & vision coverage

401(k) retirement plan

Parental leave

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to lead security across infrastructure, applications, and CI/CD in our nationwide cloud environments. You will define secure-by-design architectures, implement policy-as-code, and guide engineering teams toward resilient, compliant systems.

You will mentor engineers, drive security strategy with stakeholders, and ensure alignment with HIPAA, SOC 2, and HITRUST frameworks while enabling scalable, cloud-native delivery.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience with containerized and Kubernetes environments.
• Infrastructure-as-code (Terraform, CloudFormation) and secure IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Scripting or programming skills (Python, Go, Ruby, or similar).
• Experience building DevSecOps owned resources from early-stage to scale.
• Background in site reliability engineering (SRE) or platform engineering.
• Security certifications such as CISSP, CISM, CCSP, or cloud security certifications.
• Experience with observability platforms and integrating security telemetry into monitoring systems.

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature the security program in alignment with healthcare regulatory frameworks (HIPAA, SOC 2, HITRUST).
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.

Skills

Cloud architecture

Kubernetes

IaC pipelines

Security testing

Python

Go

Ruby

Security certifications

SRE mindset

Observability

Tools

Terraform

CloudFormation

CI/CD

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to lead security across infrastructure, applications, and CI/CD in our nationwide cloud environments. You will define secure-by-design architectures, implement policy-as-code, and guide engineering teams toward resilient, compliant systems.

You will mentor engineers, drive security strategy with stakeholders, and ensure alignment with HIPAA, SOC 2, and HITRUST frameworks while enabling scalable, cloud-native delivery.