Senior DevSecOps Engineer - Secure Cloud & HIPAA Ready

Fuze Health Inc.; Wisconsin; On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental, vision, and medical plans

401(k) retirement plan

Generous paid holidays and parental le

Job summary

Fuze Health Inc. in the United States (WI) is seeking a Senior DevSecOps Engineer to join our Engineering organization.

You will lead secure cloud architectures, build secure CI/CD pipelines, and embed security into the full software lifecycle to support nationwide pharmacy operations. This hands-on role requires deep cloud, container, and IaC expertise, experience with HIPAA/SOC 2/HITRUST, and the ability to influence across teams while maintaining regulatory compliance and strong security

Qualifications

• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins).
• Infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

Cloud architecture (AWS/GCP)

Containerized environments

CI/CD

IaC (Terraform/CloudFormation)

Application security

IAM / zero-trust / encryption

Regulated environments (HIPAA/SOC 2/HI

Scripting (Python/Go/Ruby)

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI

CircleCI

Jenkins

Job description

Fuze Health Inc. in the United States (WI) is seeking a Senior DevSecOps Engineer to join our Engineering organization.

You will lead secure cloud architectures, build secure CI/CD pipelines, and embed security into the full software lifecycle to support nationwide pharmacy operations. This hands-on role requires deep cloud, container, and IaC expertise, experience with HIPAA/SOC 2/HITRUST, and the ability to influence across teams while maintaining regulatory compliance and strong security