{"id":1248088,"url":"https://alion.io/job/alto-pharmacy-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":2351,"name":"Alto Pharmacy","domain":"alto.com","url":"https://alion.io/company/alto-pharmacy","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["New York, United States","Washington, United States","United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":128000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CircleCI","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Platform Engineering","optional":true},{"name":"SRE","optional":true}],"status":"live","first_seen_at":"2026-09-01T00:00:00Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-10-16T20:25:31Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Job Summary\nAt Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments - and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs.Fuze Health’s foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future.\nJob Description\nAlto Pharmacy (Fuze Health) is seeking a Senior DevSecOps Engineer to join our Engineering organization. As a full-service pharmacy operating nationally across mail-order and physical pharmacy locations, we build and operate highly reliable, secure, and compliant systems that directly impact patient health and safety.\nIn this role, you will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle. You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure Alto’s platform is secure, scalable, compliant, and resilient as we grow nationwide. This is a hands-on technical role for someone who thrives in complex, regulated environments and wants to shape architecture/ infrastructure at scale.\nKey Responsibilities •Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems. •Architect secure-by-design cloud-native systems across AWS/GCP environments. •Establish security patterns, guardrails, and reference architectures for engineering teams. •Design, maintain, and secure CI/CD pipelines and developer workflows. •Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.). •Automate security testing and compliance checks to reduce manual overhead. •Implement policy-as-code and automated governance controls. •Create automated workflows and improve developer experience through automated tooling. •Design and maintain Kubernetes resources and environments for internal and external use. •Lead identity and access management (IAM) strategy and least-privilege enforcement. •Strengthen container and Kubernetes security posture. •Oversee secrets management, encryption standards, and key management processes. •Implement controls on network segmentation, zero-trust architectures, and environment isolation. •Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks. •Partner with Security and Compliance teams on audits and remediation efforts. •Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.\n•Mentor senior and mid-level engineers on secure coding and DevSecOps practices. •Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization. •Drive cross-functional alignment across Engineering, Product, IT, and Compliance.\nMinimum Qualifications: •6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments. •Deep expertise in cloud architecture (AWS and/or GCP). •Strong experience designing, building, and securing containerized and Kubernetes-based environments. •Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.). •Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines. •Strong knowledge of application security principles, OWASP Top 10, and secure coding practices. •Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices. •Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.). •Strong scripting or programming skills (Python, Go, Ruby, or similar).\nPreferred Qualifications: •Experience in healthcare, pharmacy, fintech, or other highly regulated industries. •Experience building DevSecOps owned resources from early-stage to scale. •Background in site reliability engineering (SRE) or platform engineering. •Security certifications such as CISSP, CISM, CCSP, or cloud security certifications (AWS/GCP). •Experience with observability platforms and integrating security telemetry into monitoring systems.\nPhysical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions.\nConsistent with the Americans with Disabilities Act (ADA) and similar applicable state laws, it is Fuze Health’s policy to provide reasonable accommodation to enable qualified individuals with disabilities to perform essential job functions, unless such accommodation would cause an undue hardship.\nSalary Range: $128,000 to $160,000\nCommission Eligible:No\nTravel: No - Required up to 0% of the time\nLocation Requirement: Altois limited to individuals residing in the following states: Arizona, Arkansas, California, Colorado, Florida, Kansas, Maryland, Missouri, Nevada, New Jersey, New York, North Carolina, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Washington (WA), and Wisconsin.\nEmployment Authorization Requirement: Applicants must be authorized to work for any employer in the U.S.\nBenefits:\nFull-time employee benefits include: dental, vision, and multiple group medical plans to choose from, a 401(k) retirement savings plan, group life insurance, accidental death and dismemberment (AD&D) insurance, flexible spending account (FSA) and health savings account (HSA), commuter benefits, employer-paid short-term (STD) and long-term disability (LTD) insurance, and additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program). Employees are also provided flexible vacation time, accrued paid sick time, 10 paid holidays, (2 floating holidays for full time non-exempt employees) , and eight weeks of paid parental leave for eligible employees, additional paid weeks for the birthing parent, 4 weeks paid caregiver leave, and a Lifestyle Spending Account allowance each month.\nMore Benefits Information Here: Fuze Health Benefits Site \nApplication deadline: August 31, 2026.\n#LI-Remote\nAdditional Information\n#LI-Remote\nEqual Opportunity Employer\nFuze Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, gender identity, sexual orientation, age, disability, veteran status, or any other legally protected basis. If you have a disability and require reasonable accommodation during any portion of the application or hiring process, please contact us at .\nFuze Health considers qualified applicants with arrest or conviction records for employment and conducts background checks consistent with applicable law, including the California, Los Angeles County, San Francisco, Philadelphia, and New York City Fair Chance laws. We are an E-Verify participating company.\nUse of Automated Decision Tools\nFuze Health recruiters and hiring managers may use automated decision tools to help identify candidates who match the stated job requirements, and to what extent. These tools are designed to help ensure fairness in all aspects of the hiring process by providing recruiters and hiring managers with data-backed insights based on information provided in your resume, including work experience, education, and other skills. Fuze Health does not use automated decision tools to make hiring decisions; hiring decisions always involve human review and input. If you have any questions or would like to request an alternative process, please contact us at .\nPrivacy Notice\nTo learn about Fuze Health’s privacy practices, including compliance with applicable privacy laws, please read our Privacy Notice for Job Applicants.","description_format":"text","description_chars":8981,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Florida","iso":null,"kind":"city"},{"name":"New Jersey","iso":null,"kind":"city"},{"name":"Kansas","iso":null,"kind":"city"},{"name":"Missouri","iso":null,"kind":"city"},{"name":"Maryland","iso":null,"kind":"city"},{"name":"Nevada","iso":null,"kind":"city"},{"name":"Arkansas","iso":null,"kind":"city"},{"name":"New York","iso":null,"kind":"city"},{"name":"North Carolina","iso":null,"kind":"city"},{"name":"Colorado","iso":null,"kind":"city"},{"name":"California","iso":null,"kind":"city"},{"name":"Arizona","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Health Care","Pharmacies"],"lifecycle":[{"event":"open","at":"2026-09-25T18:07:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":182500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":48,"band":"ok","label":"Likely open","p_open":1,"p_active":0.874,"p_room":0.55,"age_days":46,"expected_fill_days":31,"reasons":["conf:9","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":160000,"is_top_pay":false},"html_url":"https://alion.io/job/alto-pharmacy-senior-devsecops-engineer","json_url":"https://alion.io/job/alto-pharmacy-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-18T02:41:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4321,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2351},"rest":"https://alion.io/mcp/rest/get_company?id=2351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falto-pharmacy-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falto-pharmacy-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falto-pharmacy-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alto-pharmacy-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falto-pharmacy-senior-devsecops-engineer"}]}