Staff DevSecOps Engineer– Medical Devices
Core
Implement and maintain security controls, CI/CD pipelines, and supply chain security for AWS-based cloud-native platforms supporting connected medical devices and digital health solutions.
Role type
Staff DevSecOps Engineer (Medical Devices)
Builds
Secure cloud-native platforms for Software as a Medical Device (SaMD) and digital health solutions
Domain
Healthcare / Cloud Security / DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
AWS cloud security, CI/CD pipeline security, software supply chain security (SBOM, dependency management), HIPAA compliance, container security, identity and access management, security automation, vulnerability management, Infrastructure as Code (Terraform, CloudFormation, CDK), secure coding practices
Preferred skills
FDA-regulated product experience, IEC 62304/ISO 14971 knowledge, AI-powered healthcare platform experience, professional security certifications (CISSP, CSSLP, AWS Security Specialty, CKS)
Technologies
AWS (ECS, EKS, Lambda, RDS, S3, SQS, Cognito, IAM, KMS, CloudFormation), GitHub Actions, Terraform, Kubernetes, SAST/DAST/SCA tools
Responsibilities
Implement security controls across AWS environments for SaMD; Integrate security capabilities into CI/CD pipelines and SSDLC processes; Manage software supply chain security activities; Configure identity and access management solutions; Design and maintain audit logging for HIPAA compliance; Partner with engineering teams to remediate vulnerabilities; Support security risk assessments and incident response; Build security automation capabilities; Support operational readiness of cloud production systems
Seniority
Staff, hands-on IC with strategic oversight