Cloud & Digital Platform DevSecOps Engineer
il y a 6 jours
Irvine
Job Description Company & Job Overview Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users. The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment. The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery. Responsibilities Cloud Infrastructure & Platform Engineering • Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC), • Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs), • Design infrastructure for:, • Device connectivity platforms (IoT, MQTT ingestion), • Web/mobile applications (portals, APIs), • Data platforms (S3, RDS, Redshift), • Design and implement end-to-end CI/CD pipelines for:, • Backend services (APIs, microservices), • Frontend applications (React portals, mobile apps), • Infrastructure deployments (IaC pipelines), • Enable automated build, test, security scan, and deployment workflows, • Implement progressive delivery strategies:, • Blue/Green deployments, • Canary releases, • Integrate pipelines with tools such as:, • GitHub Actions / GitLab CI / Jenkins, • Embed security into the SDLC (“Shift Left Security”):, • SAST, DAST, dependency scanning, • Container security (ECR scanning, runtime protection), • Implement identity and access management (IAM) best practices, • Design and enforce:, • Secrets management (AWS Secrets Manager, Parameter Store), • Encryption (KMS, TLS/mTLS), • Enable device and platform security:, • Certificate lifecycle management (PKI, mTLS), • Support compliance with:, • Build and maintain observability stack:, • Metrics (CloudWatch), • Logging (CloudWatch Logs, OpenSearch), • Tracing (X-Ray, OpenTelemetry), • Define SLIs, SLOs, and alerting strategies, • Enable proactive monitoring for:, • Develop reusable infrastructure modules using:, • Terraform / CloudFormation, • Build internal developer platform capabilities:, • Self-service infrastructure provisioning, • Standardized deployment templates, • Enable developer productivity through:, • Automated environments (dev/test/stage/prod), • Ensure infrastructure and pipelines support:, • IEC 62304 , ISO 14971 risk management, • Maintain:, • Traceability across build, test, and deployment, • Audit-ready logs and deployment records, • Partner with:, • Platform engineering, Data engineering, Security and QA teams, • Mentor engineers on DevOps and security best practices, • Lead design reviews for infrastructure and deployment architecture Required Skills & Abilities Cloud & Infrastructure Expertise • Deep experience with AWS services:, • Compute: EC2, Lambda, ECS/EKS, • Networking: VPC, ALB/NLB, PrivateLink, • Storage: S3, EBS, • Databases: RDS, Aurora PostgreSQL, • Integration: API Gateway, EventBridge, SNS/SQS, • Strong understanding of:, • AWS Well-Architected Framework, • Expertise in CI/CD tools:, • GitHub Actions, GitLab CI, Jenkins, • Containerization & orchestration:, • Experience implementing:, • Secure SDLC pipelines, IAM least privilege models, • Familiarity with:, • Experience with monitoring/logging tools:, • CloudWatch, Prometheus, Grafana, OpenSearch, • Strong understanding of:, • Experience leveraging tools such as:, • GitHub Copilot, Claude / Codex, • Ability to:, • Automate DevOps workflows, enhance code quality and testing using AI Education & Experience Bachelor’s or master’s degree in computer science, Engineering, or related field • 5+ years of experience in:, • Cloud infrastructure / DevOps / SRE, • CI/CD pipeline design and automation, • Experience in regulated environments (medical device or healthcare preferred), • Strong understanding of:, • IEC 62304 , ISO 14971 Travel • The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences. Physical Requirements • Sustained periods of time standing and sitting in a laboratory, • Sitting at a desk utilizing a computer, • Some lifting of<25 pounds The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.