Senior DevSecOps Engineer: Secure CI/CD & IaC

Viva Health; Birmingham (AL); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health Insurance

401(k) Plan

Paid Time Off

9 Paid Holidays + Floating Holiday

Tuition Assistance

Flexible Spending Accounts

Community Service Time Off

Life Insurance

Disability Coverage

Employee Wellness Program

Training and Development Programs

Job summary

VIVA HEALTH in Birmingham, AL is seeking an Information Security Development Engineer to integrate security across the SDLC and implement secure CI/CD pipelines and IaC practices. You will collaborate with software engineering, infrastructure, and compliance teams to embed risk management, automation, and governance in development processes.

The role focuses on secure design, threat modeling, vulnerability response, and regulatory compliance (HIPAA/HITECH).

Qualifications

• Bachelor's Degree in Computer Science, Information Security, or related field; Work experience may substitute for education requirement
• 4+ years’ experience in DevSecOps, site reliability engineering with a security focus or similar role
• Strong experience with major cloud platforms (AWS, Azure) and cloud security best practices
• Proven ability to build and manage CI/CD pipelines with integrated security controls (Jenkins, GitHub Actions, GitLab CI, Azure, DevOps)
• Hands-on experience with Infrastructure as Code and configuration management (Terraform, CloudFormation, ARM/Bicep)
• Proficiency with security tooling including SAST/DAST, dependency and container scanning, and cloud security posture management
• Solid understanding of networking, IAM, encryption, key management, and secure architecture principles
• Familiarity with healthcare regulations and frameworks (HIPAA, HITECH, CMS)
• Strong communication and collaboration skills across engineering, security, compliance, and business teams

Responsibilities

• Design, build, and maintain secure CI/CD pipelines, IaC, monitoring, threat detection, and compliance controls across applications, APIs, and cloud platforms
• Oversee patching and maintenance throughout the software lifecycle
• Partner with software engineering, infrastructure, compliance, and operations teams to embed security, risk management, and automation in the SDLC
• Monitor, detect, and respond to security vulnerabilities and incidents including remediation and root-cause analysis
• Maintain observability for systems and security events through logging, monitoring, and alerting actions
• Support regulatory compliance and contribute to audits and control implementation (HIPAA, CMS)
• Perform risk assessments and security architecture reviews for internal systems, cloud environments, and third-party vendors
• Embed secure development practices, threat modeling, and security review gates into engineering workflows
• Stay current on evolving threats, tools, and cloud best practices; drive adoption

Skills

DevSecOps

Site Reliability Engineering

Cloud Platforms (AWS/Azure)

CI/CD with security

Infrastructure as Code (Terraform,  CF

Security testing tools (SAST/DAST)

Networking & IAM & encryption

Regulatory compliance knowledge (HIPAA

Security collaboration

Education

Bachelor's Degree in CS/Info Security

Tools

Terraform

CloudFormation

ARM/Bicep

Jenkins

GitHub Actions

GitLab CI

Job description

VIVA HEALTH in Birmingham, AL is seeking an Information Security Development Engineer to integrate security across the SDLC and implement secure CI/CD pipelines and IaC practices. You will collaborate with software engineering, infrastructure, and compliance teams to embed risk management, automation, and governance in development processes.

The role focuses on secure design, threat modeling, vulnerability response, and regulatory compliance (HIPAA/HITECH).