DevSecOps Engineer

Job Purpose

The DevSecOps Engineer will work closely with Development and IT teams to build and maintain secure, scalable, reliable, and automated cloud environments across AWS and Azure.

Duties & Responsibilities

• Build, deploy, manage, and troubleshoot cloud infrastructure across AWS and Azure
• Develop and maintain Infrastructure-as-Code (IaC) using Terraform
• Build and maintain CI/CD pipelines using GitHub Actions, Jenkins, or similar platforms
• Integrate security into CI/CD pipelines, including vulnerability scanning, secrets detection, dependency scanning, and container/IaC security checks
• Manage AWS services including EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ECR, CloudWatch, CloudTrail, Route 53, and load balancers
• Support Azure services including VMs, VNets, NSGs, Storage, Entra ID, App Services, Azure Monitor, and related cloud services
• Implement and maintain cloud security controls, including IAM/RBAC, least privilege, encryption, secrets management, network security, and security policies
• Support containerized applications using Docker, ECS, EKS, and ECR
• Monitor cloud environments and troubleshoot infrastructure, networking, deployment, performance, and application connectivity issues
• Support cloud security services such as AWS Security Hub, GuardDuty, Inspector, AWS Config, Microsoft Defender for Cloud, and Azure Policy
• Automate operational tasks using Python, PowerShell, Bash, AWS CLI, and Azure CLI
• Support vulnerability remediation and resolution of cloud security and compliance findings
• Maintain technical documentation, deployment procedures, runbooks, and operational standards
• Work with development teams to improve deployment automation, reliability, security, and operational efficiency
• Support cloud cost optimization and resource right-sizing initiatives
• Follow security and compliance requirements, including HIPAA, HITRUST, SOC 2, and PCI-DSS, where applicable
• Other duties as assigned
• Use, protect and disclose patients' protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standards

• Understand and comply with Information Security and HIPAA policies and procedures at all times
• Limit viewing of PHI to the absolute minimum as necessary to perform assigned duties

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent professional experience
• 4+ years of hands-on DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering experience
• AWS and/or Azure certifications are preferred, including: AWS Certified DevOps/SA Engineer - Associate or Professional, Microsoft Azure Associate or Expert-level certifications and/or Terraform Associate Certifications
• Hands-on experience with AWS and Microsoft Azure
• Strong working knowledge of core AWS services, including EC2, VPC, IAM, S3, Lambda, ECS/EKS, ECR, CloudWatch, and CloudTrail
• Working knowledge of Azure infrastructure, networking, identity, security, and monitoring services
• Strong hands-on experience with Terraform and Infrastructure-as-Code (IaC)
• Experience building and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or equivalent tools
• Experience with Docker and container orchestration platforms such as ECS/EKS.
• Understanding of DevSecOps practices and experience integrating security controls into deployment pipelines
• Strong understanding of IAM/RBAC, secrets management, encryption, vulnerability management, network security, and least-privilege principles
• Experience with cloud networking, including VPC/VNet, subnets, routing, DNS, VPN, security groups/NSGs, load balancing, and firewalls
• Experience with cloud monitoring, logging, alerting, and troubleshooting
• Scripting and automation experience using Python, PowerShell, Bash, AWS CLI, and/or Azure CLI
• Ability to troubleshoot cloud infrastructure, deployment, security, and networking issues independently
• Proficiency in Microsoft Office Suite

• Strong interpersonal skills, ability to communicate well at all levels of the organization
• Strong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analyses
• High level of integrity and dependability with a strong sense of urgency and results oriented
• Excellent written and verbal communication skills required

Working Conditions

• Ability to work outside of normal business hours as needed
• Must possess a smart-phone or electronic device capable of downloading applications, for multifactor authentication and security purposes
• Physical Demands: While performing the duties of this job, the employee is occasionally required to move around the work area; Sit; perform manual tasks; operate tools and other office equipment such as computer, computer peripherals and telephones; extend arms; kneel; talk and hear
• Mental Demands: The employee must be able to follow directions, collaborate with others, and handle stress
• Work Environment: The noise level in the work environment is usually minimal

Med-Metrix will not discriminate against any employee or applicant for employment because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, veteran status, other non-merit based factors, or any other characteristic protected by federal, state or local law.