Senior DevSecOps Engineer
Core
Own and improve AWS infrastructure, delivery pipelines, and security operations while serving as the internal technical security lead for SOC 2 and HIPAA compliance.
Role type
Senior hands-on IC DevSecOps Engineer
Builds
Multi-account AWS environment, CI/CD pipelines, security controls, and compliance evidence for SOC 2/HIPAA
Domain
Healthcare interoperability, cloud infrastructure, and security compliance
Required skills
AWS (ECS, IAM, VPC, RDS, KMS, GuardDuty, Inspector, Security Hub), Infrastructure as Code (CloudFormation, CDK, Terraform), CI/CD (Jenkins, GitHub), vulnerability management, incident response, SOC 2/HIPAA compliance, scripting (Bash, Python, JavaScript)
Preferred skills
Healthcare/regulated industry experience, HL7/FHIR interoperability, Datadog/SIEM, compliance automation (Vanta, Drata), endpoint security, AWS Security Specialty/CISSP certifications
Technologies
AWS, ECS, Fargate, RDS MySQL, S3, Jenkins, GitHub, CloudFormation, Datadog, CloudWatch, Vanta, Drata
Responsibilities
Manage multi-account AWS infrastructure and IaC; run end-to-end vulnerability management and remediation; lead SOC 2 Type 2 and HIPAA compliance programs and audits; build observability and incident response capabilities; own security policies and technical controls; support secure integrations with hospital customers
Seniority
Senior, hands-on IC
