Senior DevSecOps Engineer: Secure Cloud & IaC Leader

Fuze Health Inc.; Williamstown (NJ); On-site; USD 128,000 - 160,000; Full time

Benefits offered by this job

Dental coverage

Vision coverage

401(k) plan

Parental leave

Job summary

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure across AWS/GCP, implement secure-by-design patterns, and drive CI/CD security in a regulated healthcare environment.

You will mentor engineers, establish governance controls, and collaborate with Security, Compliance, and Product teams to strengthen the platform’s security posture as we scale nationwide.

Qualifications

• 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
• Deep expertise in cloud architecture (AWS and/or GCP).
• Strong experience designing, building, and securing containerized and Kubernetes-based environments.
• Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
• Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
• Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
• Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
• Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
• Strong scripting or programming skills (Python, Go, Ruby, or similar).

Responsibilities

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
• Architect secure-by-design cloud-native systems across AWS/GCP environments.
• Establish security patterns, guardrails, and reference architectures for engineering teams.
• Design, maintain, and secure CI/CD pipelines and developer workflows.
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
• Automate security testing and compliance checks to reduce manual overhead.
• Implement policy-as-code and automated governance controls.
• Create automated workflows and improve developer experience through automated tooling.
• Design and maintain Kubernetes resources and environments for internal and external use.
• Lead identity and access management (IAM) strategy and least-privilege enforcement.
• Strengthen container and Kubernetes security posture.
• Oversee secrets management, encryption standards, and key management processes.
• Implement controls on network segmentation, zero-trust architectures, and environment isolation.
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
• Partner with Security and Compliance teams on audits and remediation efforts.
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance.

Skills

Cloud architecture

DevSecOps

Container security

IaC knowledge

CI/CD tooling

Scripting (Python/Go/Ruby)

HIPAA regulated environments

Zero-trust / IAM

Security principles (OWASP)

Tools

GitHub Actions

GitLab CI

CircleCI

Jenkins

Terraform

CloudFormation

Job description

Fuze Health is seeking a Senior DevSecOps Engineer to lead security-focused infrastructure across AWS/GCP, implement secure-by-design patterns, and drive CI/CD security in a regulated healthcare environment.

You will mentor engineers, establish governance controls, and collaborate with Security, Compliance, and Product teams to strengthen the platform’s security posture as we scale nationwide.