DevSecOps Engineer

About the role

The DevSecOps Engineer will work closely with Development and IT teams to build and maintain secure, scalable, reliable, and automated cloud environments across AWS and Azure.

Responsibilities

• Build, deploy, manage, and troubleshoot cloud infrastructure across AWS and Azure
• Develop and maintain Infrastructure-as-Code (IaC) using Terraform
• Build and maintain CI/CD pipelines using GitHub Actions, Jenkins, or similar platforms
• Integrate security into CI/CD pipelines, including vulnerability scanning, secrets detection, dependency scanning, and container/IaC security checks
• Manage AWS services including EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ECR, CloudWatch, CloudTrail, Route 53, and load balancers
• Support Azure services including VMs, VNets, NSGs, Storage, Entra ID, App Services, Azure Monitor, and related cloud services
• Implement and maintain cloud security controls, including IAM/RBAC, least privilege, encryption, secrets management, network security, and security policies
• Support containerized applications using Docker, ECS, EKS, and ECR
• Monitor cloud environments and troubleshoot infrastructure, networking, deployment, performance, and application connectivity issues
• Support cloud security services such as AWS Security Hub, GuardDuty, Inspector, AWS Config, Microsoft Defender for Cloud, and Azure Policy
• Automate operational tasks using Python, PowerShell, Bash, AWS CLI, and Azure CLI
• Support vulnerability remediation and resolution of cloud security and compliance findings
• Maintain technical documentation, deployment procedures, runbooks, and operational standards
• Work with development teams to improve deployment automation, reliability, security, and operational efficiency
• Support cloud cost optimization and resource right-sizing initiatives
• Follow security and compliance requirements, including HIPAA, HITRUST, SOC 2, and PCI-DSS, where applicable
• Other duties as assigned
• Use, protect and disclose patients’ protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards
• Understand and comply with Information Security and HIPAA policies and procedures at all times
• Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent professional experience
• 4+ years of hands-on DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering experience
• AWS and/or Azure certifications are preferred, including: AWS Certified DevOps/SA Engineer – Associate or Professional, Microsoft Azure Associate or Expert-level certifications and/or Terraform Associate Certifications
• Hands-on experience with AWS and Microsoft Azure
• Strong working knowledge of core AWS