> Markdown version of [/jobs/ext/214975-cloud-digital-platform-devsecops-engineer](https://www.wearedevelopers.com/jobs/ext/214975-cloud-digital-platform-devsecops-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud & Digital Platform DevSecOps Engineer - **Company:** Diality Inc - **Location:** Irvine, CA, United States - **Experience:** Expert - **Salary:** $151,442.0 - $167,475.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Agile Methodology, Artificial Intelligence, Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Cloud Computing, Software Quality, Cyber Security, Databases, Continuous Integration, Information Engineering, Data Systems, DevOps, Disaster Recovery, Distributed Systems, EHealth, Github, Identity and Access Management, Mobile Application Software, Key Management, PostgreSQL, Message Queuing Telemetry Transport (MQTT), Public Key Infrastructure, Systems Development Life Cycle, Reliability Engineering, Prometheus, Software Vulnerability Management, Data Logging, Cloud Platform System, Spring Cloud, GitHub Copilot, DevOps Tools - Open-source, ReactJS, System Availability, Delivery Pipeline, Grafana, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Backend, Cloudformation, Containerization, Gitlab-ci, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Performance Monitor, Data Management, Front End Software Development, Cloudwatch, Api Gateway, Amazon Simple Queue Service (SQS), Terraform, Devsecops, Docker, Jenkins, Static Application Security Testing, Vulnerability Analysis, Microservices, Dynamic Application Security Testing - **Published:** May 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=905414e7ceb13800 ## About the Role Do you have experience in Vulnerability scanning?, * Deep experience with AWS services * Compute: EC2, Lambda, ECS/EKS * Networking: VPC, ALB/NLB, PrivateLink * Storage: S3, EBS * Databases: RDS, Aurora PostgreSQL * Integration: API Gateway, EventBridge, SNS/SQS * Strong understanding of AWS Well-Architected Framework and multi-account cloud governance CI/CD & DevOps Tooling * Expertise in CI/CD tools: * GitHub Actions, GitLab CI, Jenkins * Containerization & orchestration: * Docker, Kubernetes (EKS preferred) DevSecOps & Security * Experience implementing secure SDLC pipelines, IAM least privilege models * Familiarity with threat modeling, Vulnerability management tools Observability & Reliability * Experience with monitoring/logging tools: * CloudWatch, Prometheus, Grafana, OpenSearch * Strong understanding of: * Distributed systems reliability, Incident response and root cause analysis AI-Assisted Engineering (Preferred) * Experience leveraging tools such as GitHub Copilot, Claude / Codex * Ability to automate DevOps workflows, enhance code quality and testing using AI, * Bachelor's or master's degree in computer science, Engineering, or related field * 5+ years of experience in Cloud infrastructure / DevOps / SRE and CI/CD pipeline design and automation * Experience in regulated environments (medical device or healthcare preferred) * Strong understanding of IEC 62304 , ISO 14971 Travel * The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences. Physical Requirements * Sustained periods of time standing and sitting in a laboratory * Sitting at a desk utilizing a computer * Some lifting of<25 pounds ## Description The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality's digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment. The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery. Responsibilities Cloud Infrastructure & Platform Engineering * Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC) * Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs) * Design infrastructure for: * Device connectivity platforms (IoT, MQTT ingestion) * Web/mobile applications (portals, APIs) * Data platforms (S3, RDS, Redshift) * Implement high availability, disaster recovery, and cost optimization strategies CI/CD & Release Engineering * Design and implement end-to-end CI/CD pipelines for: * Backend services (APIs, microservices) * Frontend applications (React portals, mobile apps) * Infrastructure deployments (IaC pipelines) * Enable automated build, test, security scan, and deployment workflows * Implement progressive delivery strategies: * Blue/Green deployments * Canary releases * Integrate pipelines with tools such as: * GitHub Actions / GitLab CI / Jenkins * AWS CodePipeline / CodeBuild / CodeDeploy DevSecOps & Cybersecurity * Embed security into the SDLC ("Shift Left Security"): * SAST, DAST, dependency scanning * Container security (ECR scanning, runtime protection) * Implement identity and access management (IAM) best practices * Design and enforce: * Secrets management (AWS Secrets Manager, Parameter Store) * Encryption (KMS, TLS/mTLS) * Enable device and platform security: Certificate lifecycle management (PKI, mTLS) * Support compliance with: FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST Observability & Reliability Engineering * Build and maintain observability stack: * Metrics (CloudWatch) * Logging (CloudWatch Logs, OpenSearch) * Tracing (X-Ray, OpenTelemetry) * Define SLIs, SLOs, and alerting strategies * Enable proactive monitoring for: Device fleet health, Platform performance, Security anomalies Infrastructure Automation & Platform Enablement * Develop reusable infrastructure modules using Terraform / CloudFormation * Build internal developer platform capabilities: * Self-service infrastructure provisioning * Standardized deployment templates * Enable developer productivity through Automated environments (dev/test/stage/prod) and Ephemeral environments for testing Regulatory & Quality Compliance * Ensure infrastructure and pipelines support: IEC 62304 , ISO 14971 risk management * Maintain: Traceability across build, test, deployment, and Audit-ready logs and deployment records * Contribute to AAMI TIR45 aligned Agile processes Collaboration & Leadership * Partner with Platform engineering, Data engineering, Security and QA teams * Mentor engineers on DevOps and security best practices * Lead design reviews for infrastructure and deployment architecture ## Related Videos - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix)