DevSecOps Engineer

At Xealth, we’re revolutionizing healthcare by leveraging data and automation to empower care providers—building on EHRs such as Epic and Cerner—to seamlessly prescribe, deliver, and monitor digital health for patients. We are a detail-oriented team committed to maintaining high standards while moving with agility and impact.

We’re looking for an engineer who is passionate about building reliable, secure cloud infrastructure and eager to grow their skills across Dev Ops, security, and automation. If you thrive on learning, value collaboration, and want your work to improve health outcomes for millions, you’ll fit right in.

As a Dev Sec Ops  Engineer, you’ll work closely with our senior engineers and Info Sec team to build, maintain, and improve our cloud platform. You’ll take ownership of real deliverables from day one, with mentorship and guidance along the way.

• Support the Info Sec team in running and triaging security scans using tools like Semgrep, Checkov, Lacework, or OWASP ZAP.
• Develop familiarity with HIPAA and SOC2 compliance requirements and apply them to infrastructure work.
• Participate in security reviews and help maintain a security‑first development culture.
• Support integration of ongoing Burp Suite testing.
• Contribute to and maintain our AWS infrastructure using Terraform, following established patterns for modularity and reusability.
• Help implement self‑scaling and self‑healing configurations under the guidance of senior engineers.
• Support VPC, EC2, ECS, EKS, IAM, S3, and SQS environments in a production HIPAA‑regulated context.

• Own and improve automation scripts and pipelines using Python or NodeJS, targeting manual toil reduction across the CI/CD lifecycle.
• Assist in integrating security tooling (SAST/DAST/CSPM) into delivery pipelines without blocking developer velocity.
• Identify repetitive manual tasks and propose or implement automation solutions.

• Monitor infrastructure health using logging and metrics tooling (Prometheus, Grafana, LGTM stack) and respond to alerts.
• Participate in on‑call rotations with senior engineers and contribute to blameless post‑mortems.
• Help document root causes and implement lasting fixes, not just quick patches.

• Leverage AI tools (Git Hub Copilot, Claude) to accelerate IaC authoring, documentation, and code review.
• Experiment with prompt‑driven approaches including Gemini Enterprise to infrastructure tasks and share learnings with the team.
• Work with agentic operations/agentic engineering tools.

• AWS Foundations:
  Hands‑on experience with core services including VPC, EC2, ECS, IAM, S3, and SQS. EKS experience is a plus.
• Infrastructure as Code:
  Working knowledge of Terraform; comfortable following and contributing to established module patterns.
• Scripting & Automation:
  Proficiency in Python or NodeJS for writing clean, maintainable automation scripts.
• Networking Basics:
  Solid understanding of VPC design, TLS/HTTPS, and network security fundamentals.
• Security Tooling:
  Some exposure to SAST, DAST, or CSPM tools (e.g., Semgrep, Checkov, OWASP ZAP, Lacework, or Crowd Strike).
• Observability:
  Familiarity with logging and monitoring concepts; experience with Prometheus, Grafana, or similar stacks is a plus.

• Regulated Environments:
  Any exposure to HIPAA, SOC2, or PCI‑DSS compliance practices.
• Kubernetes:
  Basic experience operating or deploying workloads in Kubernetes (EKS preferred).
• Git Ops:
  Awareness of pull‑based deployment patterns (ArgoCD or Flux).
• Certifications:
  
  AWS Solutions Architect Associate, AWS Developer Associate, or equivalent cloud certifications.
• CI/CD Pipelines:
  Hands‑on experience with Git Hub Actions, Jenkins, or similar tools.

• Pioneer Automation: This role offers the autonomy to build intelligent, self‑driving infrastructure — the future of cloud operations.
• Meaningful Work: Your engineering directly enables better patient care and health outcomes for millions.
• Cutting‑Edge Stack: Work with modern tools and a team that prioritizes…