Senior DevSecOps Engineer
About The Position
Alto Pharmacy (Fuze Health) is seeking a Senior DevSecOps Engineer to join our Engineering organization. As a full-service pharmacy operating nationally across mail-order and physical pharmacy locations, we build and operate highly reliable, secure, and compliant systems that directly impact patient health and safety. In this role, you will operate as a senior technical leader responsible for creating and maintaining infrastructure and embedding security deeply into our engineering lifecycle. You will define DevSecOps strategy, elevate our cloud and application security posture, and partner cross-functionally to ensure Alto’s platform is secure, scalable, compliant, and resilient as we grow nationwide. This is a hands-on technical role for someone who thrives in complex, regulated environments and wants to shape architecture/ infrastructure at scale.
Requirements
- 6+ years of experience in software engineering, infrastructure engineering, or security engineering, with significant experience in DevSecOps environments.
- Deep expertise in cloud architecture (AWS and/or GCP).
- Strong experience designing, building, and securing containerized and Kubernetes-based environments.
- Hands-on experience with CI/CD systems (GitHub Actions, GitLab CI, CircleCI, Jenkins, etc.).
- Expertise in infrastructure-as-code (Terraform, CloudFormation) and securing IaC pipelines.
- Strong knowledge of application security principles, OWASP Top 10, and secure coding practices.
- Deep understanding of IAM, RBAC, zero-trust models, and encryption best practices.
- Experience operating in regulated environments (HIPAA, SOC 2, HITRUST, PCI, etc.).
- Strong scripting or programming skills (Python, Go, Ruby, or similar).
Nice To Haves
- Experience in healthcare, pharmacy, fintech, or other highly regulated industries.
- Experience building DevSecOps owned resources from early-stage to scale.
- Background in site reliability engineering (SRE) or platform engineering.
- Security certifications such as CISSP, CISM, CCSP, or cloud security certifications (AWS/GCP).
- Experience with observability platforms and integrating security telemetry into monitoring systems.
Responsibilities
- Define and lead the DevSecOps vision across infrastructure, application, and CI/CD ecosystems.
- Architect secure-by-design cloud-native systems across AWS/GCP environments.
- Establish security patterns, guardrails, and reference architectures for engineering teams.
- Design, maintain, and secure CI/CD pipelines and developer workflows.
- Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.).
- Automate security testing and compliance checks to reduce manual overhead.
- Implement policy-as-code and automated governance controls.
- Create automated workflows and improve developer experience through automated tooling.
- Design and maintain Kubernetes resources and environments for internal and external use.
- Lead identity and access management (IAM) strategy and least-privilege enforcement.
- Strengthen container and Kubernetes security posture.
- Oversee secrets management, encryption standards, and key management processes.
- Implement controls on network segmentation, zero-trust architectures, and environment isolation.
- Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks.
- Partner with Security and Compliance teams on audits and remediation efforts.
- Provide senior-level leadership during incidents, including root cause analysis and long-term mitigation planning.
- Mentor senior and mid-level engineers on secure coding and DevSecOps practices.
- Influence engineering leadership and executive stakeholders on DevSecOps practices, security strategy, and risk prioritization.
- Drive cross-functional alignment across Engineering, Product, IT, and Compliance.
Benefits
- dental
- vision
- multiple group medical plans to choose from
- 401(k) retirement savings plan
- group life insurance
- accidental death and dismemberment (AD&D) insurance
- flexible spending account (FSA)
- health savings account (HSA)
- commuter benefits
- employer-paid short-term (STD) and long-term disability (LTD) insurance
- additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program)
- flexible vacation time
- accrued paid sick time
- 10 paid holidays
- 2 floating holidays for full time non-exempt employees
- eight weeks of paid parental leave for eligible employees
- additional paid weeks for the birthing parent
- 4 weeks paid caregiver leave
- a Lifestyle Spending Account allowance each month
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
