Senior DevSecOps Engineer

Job PurposeThe Senior DevSecOps Engineer will be responsible for building and operating secure, scalable, automated, and cost-efficient cloud environments while embedding security throughout the software and infrastructure delivery lifecycle.  The Senior DevSecOps Engineer will collaborate closely with Development and IT teams to establish engineering standards, improve automation, strengthen security controls, and support enterprise workloads across AWS and Azure.

Duties & Responsibilities

Design, deploy, secure, and manage enterprise cloud infrastructure across AWS and Azure, including compute, networking, storage, identity, containers, and PaaS services

Develop and maintain Infrastructure-as-Code (IaC) using Terraform to enable standardized, repeatable, and automated cloud deployments

Design, build, and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or similar platforms

Embed security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, secrets detection, container scanning, and Infrastructure-as-Code security scanning

Implement and maintain AWS and Azure cloud governance, including IAM/RBAC, policies, tagging standards, account/subscription structures, and security guardrails

Implement cloud security best practices using services such as AWS IAM, Security Hub, GuardDuty, Inspector, KMS, AWS Config, Microsoft Defender for Cloud, Entra ID, Azure Policy, and Key Vault

Design and support containerized environments using EKS, ECS, ECR, and container security best practices

Implement centralized monitoring, logging, alerting, and observability using AWS CloudWatch, CloudTrail, Azure Monitor, Log Analytics, Microsoft Sentinel, and related platforms

Identify and remediate cloud security vulnerabilities, configuration risks, and compliance findings in partnership with Security and Engineering teams

Support workload migration, modernization, and cloud-native architecture initiatives across AWS and Azure

Implement cloud cost optimization and FinOps practices, including right-sizing, commitments/reservations, resource lifecycle management, and cost allocation

Develop automation using Python, PowerShell, Bash, AWS CLI, and Azure CLI

Troubleshoot complex infrastructure, deployment, security, networking, and application connectivity issues

Develop and maintain architecture diagrams, technical documentation, runbooks, standards, and operational playbooks

Mentor engineers and promote DevSecOps, automation, security, and cloud engineering best practices

Ensure cloud environments align with applicable regulatory and industry standards, including HIPAA, HITRUST, SOC 2, and PCI-DSS

Other duties as assigned

Use, protect and disclose patients’ protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards

Understand and comply with Information Security and HIPAA policies and procedures at all times

Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties

Qualifications

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience

7+ years of IT/engineering experience, including significant hands-on experience with cloud infrastructure and DevSecOps

Cloud certifications such as AWS Certified DevOps/SA– Professional, AWS Certified DevOps/SA – Associate, AWS Certified Security – Specialty, Microsoft Azure Associate and/or Expert-level certifications, and/or Terraform Associate Certifications required

Strong hands-on expertise with AWS and Microsoft Azure

Strong understanding of AWS services, including EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ECR, CloudWatch, CloudTrail, Route 53, ELB/ALB, and AWS Organizations

Strong understanding of Azure services, including VMs, VNets, NSGs, Azure Firewall, Application Gateway, Storage, Entra ID, App Services, and Azure Monitor

Advanced hands-on experience with Terraform and Infrastructure-as-Code (IaC)

Strong experience designing and managing CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or equivalent technologies

Hands-on experience integrating security testing and controls into CI/CD pipelines.

Strong understanding of IAM, RBAC, secrets management, encryption, network security, vulnerability management, and least-privilege principles

Experience with Docker and container orchestration platforms such as ECS/EKS

Proficiency with scripting and automation using Python, PowerShell, Bash, AWS CLI, and/or Azure CLI

Strong understanding of cloud networking, including VPC/VNet, subnets, routing, DNS, VPN, load balancing, firewalls, private connectivity, and hybrid networking

Experience implementing monitoring, logging, alerting, and security observability solutions

Experience designing or operating enterprise AWS Organizations and Azure Landing Zones.

Experience with cloud security posture management (CSPM), vulnerability management, and SIEM platforms.

Knowledge of FinOps frameworks and cloud financial governance.

Experience supporting hybrid and multi-cloud architectures.

Experience working within regulated or security-sensitive environments, preferably with HIPAA, HITRUST, SOC 2, or PCI-DSS requirements.

Familiarity with Jira, Confluence, ServiceNow, or similar enterprise platforms.

Proficiency in Microsoft Office Suite

Strong interpersonal skills, ability to communicate well at all levels of the organization

Strong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analyses

High level of integrity and dependability with a strong sense of urgency and results oriented

Excellent written and verbal communication skills required

Working Conditions

May be required to work outside of normal business hours

Must possess a smart-phone or electronic device capable of downloading applications, for multifactor authentication and security purposes

Physical Demands: While performing the duties of this job, the employee is occasionally required to move around the work area; Sit; perform manual tasks; operate tools and other office equipment such as computer, computer peripherals and telephones; extend arms; kneel; talk and hear

Mental Demands: The employee must be able to follow directions, collaborate with others, and handle stress

Work Environment: The noise level in the work environment is usually minimal

Med-Metrix will not discriminate against any employee or applicant for employment because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, veteran status, other non-merit based factors, or any other characteristic protected by federal, state or local law.