DevSecOps Engineer

About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

About Med Clinic X Med Clinic X is a healthcare technology company building secure, scalable, and intelligent digital health solutions for healthcare organizations across the United States.

We develop healthcare SaaS platforms, AI-driven healthcare systems, patient portals, telemedicine solutions, automation workflows, and cloud-based digital health products for clinics, hospitals, and healthcare providers.

Our mission is to build healthcare technology that combines innovation with strong security, reliability, and compliance.

Job Overview

We are seeking a DevSecOps Engineer to integrate security practices into our software development and infrastructure processes.

In this role, you will design secure cloud environments, automate security workflows, improve CI/CD security, and protect healthcare applications handling sensitive data. You will work closely with engineering, DevOps, and security teams to ensure Med Clinic X platforms meet high standards of security and compliance for US healthcare organizations.

Responsibilities

Security Engineering & Automation

• Implement security practices across software development workflows.
• Integrate security and dependency scanners (SAST/SCA) in CI/CD.
• Automate vulnerability testing and runtime configuration audits.
• Enforce secure image signing and binary authorization rules.

Cloud Infrastructure Security

• Secure AWS, Azure, or GCP cloud configurations.
• Implement IAM role definitions using Least Privilege principles.
• Configure infrastructure as code (IaC) linting and drift scans.
• Deploy VPC network segmentation and ingress ALB security gates.

Healthcare Data Protection

• Deploy HIPAA and SOC2 compliance controls for systems data.
• Configure customer-managed KMS encryption keys for data-at-rest.
• Implement regex-based log masking (DLP) for PII/PHI sanitizing.
• Ensure secure data transit via enforced TLS 1.3 endpoints.

DevOps Collaboration

• Advise developer teams on secure coding guidelines.
• Configure Kubernetes network policies and context restrictions.
• Manage security tools integrations within the workspace.
• Support compliance auditing and security incident dry-runs.

Qualifications

Required

• Bachelor’s in CS, Cybersecurity, IT, or related field.
• Experience in DevOps, security engineering, or cloud security.
• Strong understanding of cloud infrastructure and IAM security.
• Experience configuring automated CI/CD pipelines (GitHub Actions, GitLab).
• Experience with container security and Infrastructure as Code.

Preferred

• Experience in US healthcare or healthcare SaaS environments.
• Knowledge of HIPAA, SOC 2, or healthcare compliance audits.
• Experience with cloud security scanning tools (Trivy, checkov, etc.).
• Background in application security or pen-testing.
• Relevant security certifications (Security+, CISSP, AWS Security).

Why Join Med Clinic X?

At Med Clinic X, you will help protect the technology infrastructure behind modern healthcare. You will:

• Secure healthcare platforms used by US organizations
• Build automated security systems
• Work with cloud and engineering teams
• Improve healthcare data protection
• Shape secure digital health infrastructure