> Markdown version of [/jobs/ext/2001494-devsecops-platform-engineer-boston-preferred](https://www.wearedevelopers.com/jobs/ext/2001494-devsecops-platform-engineer-boston-preferred). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # DevSecOps / Platform Engineer (Boston preferred) - **Company:** RightMove Health, LLC - **Location:** Brookline, MA, United States - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Cloud Computing Security, Continuous Integration, DevOps, Identity and Access Management, Systems Development Life Cycle, Role-Based Access Control, Software Deployment, TypeScript, File Transfer Protocol (FTP), Okta, Delivery Pipeline, AWS Lambda, AWS AppSync, Cloudformation, Api Gateway, Terraform, Devsecops, Serverless Computing, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** August 9, 2026 - **Apply:** https://www.wayup.com/i-j-DevSecOps-Platform-Engineer-Boston-preferred-RightMove-Health-761150631907852/ ## About the Role + Strong AWS experience, especially serverless (currently AppSync and Lambdas, but we're considering a move to API Gateway). + Solid infrastructure-as-code expertise (Terraform, CloudFormation, CDK, or similar). We're currently transitioning from the Serverless Framework to CDK (TypeScript); CDK experience is a plus, but strong IaC fundamentals matter more. + A platform mindset: you measure your success by how productive you make other engineers, not by how many tickets you close. + Comfortable in code: not afraid to edit application code to achieve infrastructure or tooling goals. + Solid grasp of cloud security fundamentals (IAM, network boundaries, secrets, least privilege). + CI/CD pipeline experience and a bias toward automation. + Comfort operating with autonomy in a small team where you'll likely wear many hats. Nice to have + Experience supporting SOC 2, HIPAA, or similar audits/compliance regimes. + SSO / identity tooling (Okta, AWS IAM Identity Center, etc.). ## Description We run a serverless-first stack on AWS, and we operate as a true DevOps org: engineers build and own their own infrastructure, but we're looking to add a DevOps/Platform engineer to the team to help us grow. This is a sole-platform-engineer role today, with real autonomy and real scope. You'll work across infrastructure, developer experience, and security/compliance. You'll build tooling so that we don't have to keep reinventing the wheel; you'll standardize and update our infrastructure; and you'll own and update our CI/CD pipeline so we can deploy code safely and quickly. Wha t you'll own: Application infrastructure + Build and maintain reusable infrastructure components, so application engineers can safely stand up new components without shooting themselves in the foot. + Take the lead on improving observability (monitoring, alerting, etc), so it's easy for application engineers to know that their code is running, and to learn about issues before users have to report them. + Solve concrete infra needs as they arise - everything from setting up SFTP sites for customer file-sharing to creating a pathway so that outbound API requests are sent from a fixed IP. + Standardize and harden our AWS footprint, with security, budget, and HIPAA considerations front of mind. Developer experience + Make our CI/CD pipelines faster and more effective. + Solve developer pain points like shared dev environments and locally running code. + Help us move to the next stage of maturity with improved monitoring and alerting tools. Security Engineering + You'll own security tooling integration across our SDLC - embedding automated scanning and policy enforcement so that security is a feature of our delivery pipeline, not a final gate. + Run and tune SAST, DAST, SCA, and container scanning tools so the signal-to-noise ratio is actually usable. + Implement guardrails and controls using AWS-native services such as AWS Security Hub, GuardDuty, and Config; conduct regular vulnerability scans, configuration reviews, and remediation tracking. + Threat model new services and architecture changes before they ship, ideally during design review rather than after launch. Other duties + Act as the technical interface to our outsourced IT department and recognize when our users need additional support. ## Related Videos - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)