Senior DevSecOps Engineer

Fuze Health is a healthcare technology company that connects patients and care providers with digital health, diagnostic, and pharmacy services. Alto Pharmacy is seeking a Senior DevSecOps Engineer to lead DevSecOps strategy, secure cloud infrastructure, CI/CD ecosystems, and application security across regulated healthcare environments. The role also involves incident leadership, compliance collaboration, mentoring, and cross-functional alignment.

Responsibilities:

• Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems
• Architect secure-by-design cloud-native systems across AWS/GCP environments
• Establish security patterns, guardrails, and reference architectures for engineering teams
• Design, maintain, and secure CI/CD pipelines and developer workflows
• Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.)
• Automate security testing and compliance checks to reduce manual overhead
• Implement policy-as-code and automated governance controls
• Create automated workflows and improve developer experience through automated tooling
• Design and maintain Kubernetes resources and environments for internal and external use
• Lead identity and access management (IAM) strategy and least-privilege enforcement
• Strengthen container and Kubernetes security posture
• Oversee secrets management, encryption standards, and key management processes
• Implement controls on network segmentation, zero-trust architectures, and environment isolation
• Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks
• Partner with Security and Compliance teams on audits and remediation efforts
• Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning
• Mentor senior and mid-level engineers on secure coding and DevSecOps practices
• Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization
• Drive cross-functional alignment across Engineering, Product, IT, and Compliance

Requirements:

• ● 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments
• ● Deep expertise in cloud architecture (AWS and/or GCP)
• ● Strong experience designing, building, and securing containerized and Kubernetes-based environments
• ● Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.)
• ● Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines
• ● Strong knowledge of application security principles, OWASP Top 10, and secure coding practices
• ● Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices
• ● Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.)
• ● Strong scripting or programming skills (Python, Go, Ruby, or similar)
• Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds
• The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions
• Alto is limited to individuals residing in the following states: Arizona, Arkansas, California, Kansas, Maryland, Missouri, Nevada, New Jersey, New York, North Carolina, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Washington (WA), and Wisconsin
• Applicants must be authorized to work for any employer in the U.S
• ● Experience in healthcare, pharmacy, fintech, or other highly regulated industries
• ● Experience building DevSecOps owned resources from early-stage to scale
• ● Background in site reliability engineering (SRE) or platform engineering
• ● Security certifications such as CISSP, CISM, CCSP, or cloud security certifications (AWS/GCP)
• ● Experience with observability platforms and integrating security telemetry into monitoring systems