Job Title: DevSecOps EngineerJob DescriptionThe DevSecOps Engineer will design, implement, and maintain robust security controls across AWS cloud environments that support connected medical devices, Software as a Medical Device (SaMD), and digital health solutions. This role integrates security capabilities into CI/CD pipelines and the Secure Software Development Lifecycle (SSDLC), ensuring secure coding practices and comprehensive application and infrastructure security. The engineer will focus on software supply chain security, identity and access management, audit logging, and monitoring to support HIPAA compliance and healthcare data protection. In close partnership with software engineering teams, this position drives vulnerability remediation, security automation, and operational security to maintain reliable, secure, and compliant cloud-based production systems.Responsibilities
- Implement and maintain security controls across AWS cloud environments supporting connected medical devices, Software as a Medical Device (SaMD), and digital health solutions.
- Integrate and manage security capabilities within CI/CD pipelines and Secure Software Development Lifecycle (SSDLC) processes, including secure coding practices, SAST, DAST, SCA, secrets scanning, container security scanning, and Infrastructure-as-Code security validation.
- Manage software supply chain security activities such as SBOM generation, dependency management, artifact integrity validation, artifact signing, and vulnerability remediation.
- Configure and maintain identity and access management, authentication, authorization, encryption, key management, and secrets management solutions across cloud and application environments.
- Design and maintain audit logging, monitoring, and security controls that support HIPAA compliance and healthcare data protection requirements.
- Partner with software engineering teams to identify, prioritize, and remediate security vulnerabilities throughout the product lifecycle.
- Support security risk assessments, penetration testing activities, vulnerability management initiatives, incident response efforts, and day-to-day operational security.
- Build and maintain security automation capabilities to improve platform security, compliance, and operational efficiency.
- Support the reliability, availability, monitoring, and operational readiness of cloud-based production systems running on AWS.
- Collaborate with cross-functional stakeholders to align security practices with established quality, compliance, and industry frameworks.
Essential Skills
- Bachelor's, Master's, or Ph.D. degree in Cybersecurity, Computer Science, Software Engineering, Computer Engineering, Information Security, or a related technical discipline.
- 7+ years of experience in DevSecOps, Cloud Security, Security Engineering, Application Security, or related technical roles.
- Proven experience supporting software development for healthcare products, medical devices, or digital health solutions within established quality and compliance frameworks.
- Strong experience securing cloud-native applications and platforms running on AWS.
- Hands-on experience with AWS services such as ECS, EKS, Lambda, RDS, S3, SQS, IAM, KMS, CloudFormation, and related cloud technologies.
- Experience implementing and managing CI/CD pipelines using GitHub Actions or similar platforms.
- Practical experience with security tooling including SAST, DAST, SCA, container security scanning, secrets detection, Infrastructure-as-Code security scanning, and vulnerability management solutions.
- Strong understanding of application security principles, secure coding practices, authentication, authorization, encryption, secrets management, and key management.
- Experience with software supply chain security concepts, including SBOM generation, dependency management, artifact signing, and vulnerability remediation.
- Hands-on experience with Infrastructure as Code technologies such as Terraform, CloudFormation, or AWS CDK.
- Strong understanding of OWASP guidance, cloud security best practices, and secure software development methodologies.
- Experience with containerized applications and orchestration platforms such as ECS, EKS, Kubernetes, or similar technologies.
- Experience implementing and supporting HIPAA-compliant cloud environments and healthcare data protection controls.
- Experience supporting security and compliance programs aligned with frameworks such as ISO, SOC 2, or similar industry standards.
- Strong analytical and problem-solving abilities, with excellent communication and collaboration skills.
- Demonstrated experience in DevOps and SecOps practices within cloud-native environments.
Additional Skills & Qualifications
- Experience working with regulated medical device environments or healthcare organizations, including insurers or other entities operating under strict compliance requirements.
- Deep familiarity with AWS Cloud and a broad range of AWS services, including EKS, ECS, IAM, KMS, and related security and orchestration tools.
- Hands-on experience with Kubernetes and container security best practices.
- Experience with Infrastructure as Code (IaC) and security validation for IaC, particularly using Terraform and CloudFormation.
- Knowledge of secure software supply chain practices, including SBOM creation and management for medical or healthcare-related software.
- Understanding of CI/CD best practices and the integration of security controls throughout automated delivery pipelines.
- Ability to work effectively with cross-functional engineering and compliance teams in a highly regulated domain.
- Strong documentation skills to clearly describe security architectures, controls, and processes for audit and compliance purposes.
Work EnvironmentThis role operates in a fully remote work environment, with working hours aligned to the Eastern or Central time zones. The position focuses on cloud-based platforms and modern DevSecOps practices, leveraging AWS services, CI/CD pipelines, and Infrastructure as Code tools to support secure and compliant healthcare and medical device solutions. Collaboration occurs primarily through virtual communication and distributed team workflows, offering flexibility while maintaining close coordination with engineering, security, and compliance stakeholders. Job Type & LocationThis is a Contract to Hire position based out of Wilmington, MA. Pay and BenefitsThe pay range for this position is $70.00 - $100.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits
available for this temporary role may include the following:
Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Job Type & LocationThis is a Contract to Hire position based out of Wilmington, MA. Application DeadlineThis position is anticipated to close on Nov 20, 2026. Workplace TypeThis is a fully remote position.About Actalent
Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.
The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email actalentaccommodation@actalentservices.com for other accommodation options.
San Francisco Fair Chance Ordinance:
Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.
Massachusetts Lie Detector:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Use of Artificial Intelligence (AI):
We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.
