Staff DevSecOps Engineer - FuzeRx

At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments – and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs. Fuze Health’s foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Key Responsibilities Technical Strategy & Architecture – Define and lead the DevSecOps vision and roadmap across infrastructure, application, and CI/CD ecosystems; architect secure-by-design cloud-native systems across AWS/GCP environments; establish security patterns, guardrails, and reference architectures; evaluate and implement modern security tooling across SAST, DAST, SCA, container scanning, IaC scanning, and runtime protection. Secure SDLC & Automation – Embed security controls into CI/CD pipelines and developer workflows; drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.); automate security testing and compliance checks to reduce manual overhead; implement policy-as-code and automated governance controls. Cloud & Infrastructure Security – Lead identity and access management (IAM) strategy and least-privilege enforcement; strengthen container and Kubernetes security posture; oversee secrets management, encryption standards, and key management processes; partner with infrastructure teams on network segmentation, zero-trust architectures, and environment isolation. Risk, Compliance & Incident Response – Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks; conduct threat modeling, security design reviews, and architecture risk assessments; partner with Security and Compliance teams on audits and remediation efforts; provide senior-level leadership during security incidents, including root cause analysis and long-term mitigation planning. Technical Leadership – Mentor senior and mid-level engineers on secure coding and DevSecOps practices; influence engineering leadership and executive stakeholders on security strategy and risk prioritization; drive cross-functional alignment across Engineering, Product, IT, and Compliance; raise the overall security maturity of the organization through scalable frameworks and standards. Required Experience & Qualifications Minimum Qualifications 14+ years of experience in software engineering, infrastructure engineering, or security engineering with significant experience in DevSecOps environments. Deep expertise in cloud security architecture (AWS and/or GCP). Strong experience securing containerized and Kubernetes-based environments. Hands‑on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.). Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines. Strong knowledge of application security principles, OWASP Top 10, and secure coding practices. Experience implementing and scaling SAST, DAST, SCA, container scanning, and secrets detection tools. Deep understanding of IAM, RBAC, zero‑trust models, and encryption best practices. Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.). Strong scripting or programming skills (Python, Go, Ruby, or similar). Demonstrated ability to influence architectural decisions at a Staff or Principal level. Preferred Qualifications Experience in healthcare, pharmacy, fintech, or other highly regulated industries. Experience building DevSecOps programs from early-stage to scale. Background in site reliability engineering (SRE) or platform engineering. Security certifications such as CISSP, CISM, CCSP, or cloud security certifications (AWS/GCP). Experience implementing threat modeling frameworks (STRIDE, PASTA, etc.). Experience with observability platforms and integrating security telemetry into monitoring systems. Physical Job Requirements Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions. Salary and Benefits Salary Range: $166,000 - $200,000. Commission Eligible: No. Travel: No required up to 0% of the time. Location Requirement: This position is limited to individuals residing in the following states: Arizona, Arkansas, California, Colorado, Florida, Kansas, Maryland, Missouri, Nevada, New Jersey, New York, North Carolina, Oregon, Pennsylvania, South Carolina, Tennessee, Texas, Washington (WA), and Wisconsin. Employment Authorization: Applicants must be authorized to work for any employer in the U.S. Dental, vision, and multiple group medical plans to choose from. 401(k) retirement savings plan. Group life insurance. Accidental Death and Dismemberment (AD&D) insurance. Flexible spending account (FSA) and health savings account (HSA). Commuter benefits. Employer‑paid short‑term (STD) and long‑term disability (LTD) insurance. Additional supplemental insurance plans (spouse life insurance, legal insurance, employee assistance program, home health testing kits, fertility medication discount program). Flexible vacation time, accrued paid sick time, 10 paid holidays (2 floating holidays for full‑time non‑exempt employees). Eight weeks of paid parental leave for eligible employees, additional paid weeks for the birthing parent, 4 weeks paid caregiver leave, and a Lifestyle Spending Account allowance each month. Equal Opportunity Employer Fuze Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, gender identity, sexual orientation, age, disability, veteran status, or any other legally protected basis. If you have a disability and require reasonable accommodation during any portion of the application or hiring process, please contact us at View email address on click.appcast.io. Fuze Health considers qualified applicants with arrest or conviction records for employment and conducts background checks consistent with applicable law. We are an E‑Verify participating company. #J-18808-Ljbffr Alto Pharmacy