Senior DevSecOps Engineer

Job Purpose The DevSecOps Engineer will work closely with Development and IT teams to build and maintain secure, scalable, reliable, and automated cloud environments across AWS and Azure. Duties & Responsibilities Build, deploy, manage, and troubleshoot cloud infrastructure across AWS and AzureDevelop and maintain Infrastructure-as-Code (IaC) using TerraformBuild and maintain CI/CD pipelines using GitHub Actions, Jenkins, or similar platformsIntegrate security into CI/CD pipelines, including vulnerability scanning, secrets detection, dependency scanning, and container/IaC security checksManage AWS services including EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ECR, CloudWatch, CloudTrail, Route 53, and load balancersSupport Azure services including VMs, VNets, NSGs, Storage, Entra ID, App Services, Azure Monitor, and related cloud servicesImplement and maintain cloud security controls, including IAM/RBAC, least privilege, encryption, secrets management, network security, and security policiesSupport containerized applications using Docker, ECS, EKS, and ECRMonitor cloud environments and troubleshoot infrastructure, networking, deployment, performance, and application connectivity issuesSupport cloud security services such as AWS Security Hub, GuardDuty, Inspector, AWS Config, Microsoft Defender for Cloud, and Azure PolicyAutomate operational tasks using Python, PowerShell, Bash, AWS CLI, and Azure CLISupport vulnerability remediation and resolution of cloud security and compliance findingsMaintain technical documentation, deployment procedures, runbooks, and operational standardsWork with development teams to improve deployment automation, reliability, security, and operational efficiencySupport cloud cost optimization and resource right-sizing initiativesFollow security and compliance requirements, including HIPAA, HITRUST, SOC 2, and PCI-DSS, where applicableOther duties as assignedUse, protect and disclose patients’ protected health information (PHI) only in accordance with Health Insurance Portability and Accountability Act (HIPAA) standardsUnderstand and comply with Information Security and HIPAA policies and procedures at all timesLimit viewing of PHI to the absolute minimum as necessary to perform assigned duties Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent professional experience4+ years of hands-on DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering experienceAWS and/or Azure certifications are preferred, including: AWS Certified DevOps/SA Engineer – Associate or Professional, Microsoft Azure Associate or Expert-level certifications and/or Terraform Associate CertificationsHands-on experience with AWS and Microsoft AzureStrong working knowledge of core AWS services, including EC2, VPC, IAM, S3, Lambda, ECS/EKS, ECR, CloudWatch, and CloudTrailWorking knowledge of Azure infrastructure, networking, identity, security, and monitoring servicesStrong hands-on experience with Terraform and Infrastructure-as-Code (IaC)Experience building and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, or equivalent toolsExperience with Docker and container orchestration platforms such as ECS/EKS.Understanding of DevSecOps practices and experience integrating security controls into deployment pipelinesStrong understanding of IAM/RBAC, secrets management, encryption, vulnerability management, network security, and least-privilege principlesExperience with cloud networking, including VPC/VNet, subnets, routing, DNS, VPN, security groups/NSGs, load balancing, and firewallsExperience with cloud monitoring, logging, alerting, and troubleshootingScripting and automation experience using Python, PowerShell, Bash, AWS CLI, and/or Azure CLIAbility to troubleshoot cloud infrastructure, deployment, security, and networking issues independentlyProficiency in Microsoft Office SuiteStrong interpersonal skills, ability to communicate well at all levels of the organizationStrong problem solving and creative skills and the ability to exercise sound judgment and make decisions based on accurate and timely analysesHigh level of integrity and dependability with a strong sense of urgency and results orientedExcellent written and verbal communication skills required Working Conditions Ability to work outside of normal business hours as neededMust possess a smart-phone or electronic device capable of downloading applications, for multifactor authentication and security purposesPhysical Demands: While performing the duties of this job, the employee is occasionally required to move around the work area; Sit; perform manual tasks; operate tools and other office equipment such as computer, computer peripherals and telephones; extend arms; kneel; talk and hearMental Demands: The employee must be able to follow directions, collaborate with others, and handle stressWork Environment: The noise level in the work environment is usually minimal Med-Metrix will not discriminate against any employee or applicant for employment because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), political affiliation, military service, veteran status, other non-merit based factors, or any other characteristic protected by federal, state or local law. Job Details