Remote Senior DevSecOps Engineer

Summary

The job is for a Senior DevSecOps / Platform Engineer at Cabinet Health, a company focused on sustainable healthcare. The role involves auditing, designing, and implementing secure infrastructure solutions for the patient health platform, maintaining HIPAA compliance, managing external security audits, and monitoring cloud spend.

Requirements

• 4+ years of proven experience as a Platform Engineer, DevSecOps engineer, or similar role for a company in healthcare, finance, or other highly regulated industry
• 4+ years of proven AWS experience, specifically with network systems, Route53, RDS, ECS/Fargate, ALB, Cloudfront, Lambda, and S3
• 3+ years of proven experience writing and implementing infrastructure as code
• 3+ years proven experience with SQL and relational database design
• 3+ years of proven experience working with containers and serverless infrastructure
• 3+ years experience building, maintaining and improving CI/CD pipelines (we use Github Actions)
• Strong technical knowledge of best practice security for networks, systems, web applications, APIs, and databases
• Familiarity with security tools and technologies, such as OWASP, SIEM, IDS/IPS, WAF and vulnerability scanners
• Knowledge of common adversarial Tactics, Techniques, and Procedures (Mitre Att&ck TTPs)
• Good understanding of secure software development operation best practices
• Strong expertise in architectural engineering best practices such as blue/green deployments or other zero downtime deployments methodologies

Responsibilities

• Own our HIPAA Engineering and Technical compliance monitoring
• Fix issues identified by our HIPAA monitoring platform, external vendor PenTests, and your own expertise
• Participate in code reviews and engineering review board meetings to help identify potential security issues before they arise
• Work with our engineers to implement new HIPAA application specific requirements
• Set internal SLAs for technical remediation timelines
• Build out tools for the engineering team to quickly identify and simulate customer observed bugs
• Lead infrastructure architecture design of existing and future systems
• Enhance and optimize our CI/CD pipelines (Github Actions)
• Mentor junior team members

Benefits

• Competitive Base Salary and Equity Package
• Health, Dental, Vision Insurance (100% coverage of 'gold' tier plan for health, 50% coverage for dependents/spouses)
• Flexible PTO Policy and generous holiday schedule
• Cabinet 401(k), with 100% match up to 3% of salary
• 3 months paid parental leave program
• Stipend towards cell phone/internet for work from home
• Stipend towards home office set up
• Company sponsored development and wellness programs (One Medical, Talkspace, Health Advocate, Kindbody Fertility)
• Summer Fridays - company office hours are closed after 2pm on Fridays during period between Memorial to Labor Day