{"id":2154558,"url":"https://alion.io/job/med-metrix-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":3787069,"name":"Med-Metrix","domain":"med-metrix.com","url":"https://alion.io/company/med-metrix","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"B","score":75,"open_postings":25,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":116000,"max_usd":207000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":283},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"FinOps","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Office","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-08-04T04:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-11T20:17:45Z","board_verified":true,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":68},"description":"Job PurposeThe Senior DevSecOps Engineer will be responsible for building and operating secure, scalable, automated, and cost-efficient cloud environments while embedding security throughout the software and infrastructure delivery lifecycle. The Senior DevSecOps Engineer will collaborate closely with Development and IT teams to establish engineering standards, improve automation, strengthen security controls, and support enterprise workloads across AWS and Azure.\n\nDuties & Responsibilities\nDesign, deploy, secure, and manage enterprise cloud infrastructure across AWS and Azure, including compute, networking, storage, identity, containers, and PaaS services\nDevelop and maintain Infrastructure-as-Code (IaC) using Terraform to enable standardized, repeatable, and automated cloud deployments\nDesign, build, and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or similar platforms\nEmbed security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, secrets detection, container scanning, and Infrastructure-as-Code security scanning\nImplement and maintain AWS and Azure cloud governance, including IAM/RBAC, policies, tagging standards, account/subscription structures, and security guardrails\nImplement cloud security best practices using services such as AWS IAM, Security Hub, GuardDuty, Inspector, KMS, AWS Config, Microsoft Defender for Cloud, Entra ID, Azure Policy, and Key Vault\nDesign and support containerized environments using EKS, ECS, ECR, and container security best practices\nImplement centralized monitoring, logging, alerting, and observability using AWS CloudWatch, CloudTrail, Azure Monitor, Log Analytics, Microsoft Sentinel, and related platforms\nIdentify and remediate cloud security vulnerabilities, configuration risks, and compliance findings in partnership with Security and Engineering teams\nSupport workload migration, modernization, and cloud-native architecture initiatives across AWS and Azure\nImplement cloud cost optimization and FinOps practices, including right-sizing, commitments/reservations, resource lifecycle management, and cost allocation\nDevelop automation using Python, PowerShell, Bash, AWS CLI, and Azure CLI\nTroubleshoot complex infrastructure, deployment, security, networking, and application connectivity issues\nDevelop and maintain architecture diagrams, technical documentation, runbooks, standards, and operational playbooks\nMentor engineers and promote DevSecOps, automation, security, and cloud engineering best practices\nEnsure cloud environments align with applicable regulatory and industry standards, including HIPAA, HITRUST, SOC 2, and PCI-DSS\nOther duties as assigned\nUse, protect and disclose patients’ protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards\nUnderstand and comply with Information Security and HIPAA policies and procedures at all times\nLimit viewing of PHI to the absolute minimum as necessary to perform assigned duties\nQualifications\nBachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience\n7+ years of IT/engineering experience, including significant hands-on experience with cloud infrastructure and DevSecOps\nCloud certifications such as AWS Certified DevOps/SA– Professional, AWS Certified DevOps/SA – Associate, AWS Certified Security – Specialty, Microsoft Azure Associate and/or Expert-level certifications, and/or Terraform Associate Certifications required\nStrong hands-on expertise with AWS and Microsoft Azure\nStrong understanding of AWS services, including EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ECR, CloudWatch, CloudTrail, Route 53, ELB/ALB, and AWS Organizations\nStrong understanding of Azure services, including VMs, VNets, NSGs, Azure Firewall, Application Gateway, Storage, Entra ID, App Services, and Azure Monitor\nAdvanced hands-on experience with Terraform and Infrastructure-as-Code (IaC)\nStrong experience designing and managing CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or equivalent technologies\nHands-on experience integrating security testing and controls into CI/CD pipelines.\nStrong understanding of IAM, RBAC, secrets management, encryption, network security, vulnerability management, and least-privilege principles\nExperience with Docker and container orchestration platforms such as ECS/EKS\nProficiency with scripting and automation using Python, PowerShell, Bash, AWS CLI, and/or Azure CLI\nStrong understanding of cloud networking, including VPC/VNet, subnets, routing, DNS, VPN, load balancing, firewalls, private connectivity, and hybrid networking\nExperience implementing monitoring, logging, alerting, and security observability solutions\nExperience designing or operating enterprise AWS Organizations and Azure Landing Zones.\nExperience with cloud security posture management (CSPM), vulnerability management, and SIEM platforms.\nKnowledge of FinOps frameworks and cloud financial governance.\nExperience supporting hybrid and multi-cloud architectures.\nExperience working within regulated or security-sensitive environments, preferably with HIPAA, HITRUST, SOC 2, or PCI-DSS requirements.\nFamiliarity with Jira, Confluence, ServiceNow, or similar enterprise platforms.\nProficiency in Microsoft Office Suite\nStrong interpersonal skills, ability to communicate well at all levels of the organization\nStrong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analyses\nHigh level of integrity and dependability with a strong sense of urgency and results oriented \nExcellent written and verbal communication skills required\nWorking Conditions\nMay be required to work outside of normal business hours\nMust possess a smart-phone or electronic device capable of downloading applications, for multifactor authentication and security purposes\nPhysical Demands: While performing the duties of this job, the employee is occasionally required to move around the work area; Sit; perform manual tasks; operate tools and other office equipment such as computer, computer peripherals and telephones; extend arms; kneel; talk and hear\nMental Demands: The employee must be able to follow directions, collaborate with others, and handle stress\nWork Environment: The noise level in the work environment is usually minimal\nMed-Metrix will not discriminate against any employee or applicant for employment because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, veteran status, other non-merit based factors, or any other characteristic protected by federal, state or local law.","description_format":"text","description_chars":6869,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Business Process Outsourcing (BPO)","Primary Care & Medical Centers"],"lifecycle":[{"event":"open","at":"2026-10-09T06:22:58Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.29,"p_room":0.36,"age_days":67,"expected_fill_days":34,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/med-metrix-senior-devsecops-engineer","json_url":"https://alion.io/job/med-metrix-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-11T21:11:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9881,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3787069},"rest":"https://alion.io/mcp/rest/get_company?id=3787069"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmed-metrix-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmed-metrix-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmed-metrix-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/med-metrix-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmed-metrix-senior-devsecops-engineer"}]}