DevSecOps Engineer

Nomi Health is seeking a talented DevSecOps Engineer to join our team in Austin, TX. Your primary focus will be developing infrastructure as code, defining, and maintaining AMIs, containers, and infrastructure to support our developers and users. 

This is a hybrid position working onsite 3 days a week (Tuesday, Wednesday, and Thursday).

How you will make an impact

• Define, develop, test, and deploy internally maintained AMIs, containers, and infrastructure as code
• Work closely with research team to design and develop systems that support CI/CD and scaling application deployments
• Develop and execute the enterprise security strategy and roadmap
• Transition non-infrastructure as code legacy to ansible/terraform
• Design new infrastructure components and improve existing infrastructure
• Engineer, deploy, and manage security tools and technologies
• Perform vulnerability scanning, penetration testing, and risk analysis to identify and remediate security gaps
• Investigate and resolve security breaches and incidents using forensics tools and techniques
• Create and maintain security policies, procedures, and documentation

What we are looking for

• 2+ years of experience in DevOps/SRE or Security roles
• 1+ years building/maintaining CI/CD pipelines
• Understanding of security concepts such as cryptography, authentication, authorization, access control, etc.
• Robust experience with AWS, GCP
• Extremely comfortable with docker/containerization technologies
• Experience with at least one IAC solution (Ansible, Terraform, Chef, Puppet, etc.)
• Systems triage and recovery skills, specifically with linux OS servers

Nice to Have

• Experience with JavaScript and web frameworks like Angular, React, or Vue, and knowledge of Node.js builds is a plus.
• Familiarity with deploying and maintaining orchestration platforms such as EKS, GCE, AKS, or similar systems is beneficial
• Experience in deploying web frameworks and protocols, including Angular, React, Vue, or Nginx, is advantageous
• Experience with data analytics products is a positive, but not required
• An understanding of the healthcare/medical industry is a plus
• Familiarity with security audits such as SOC2, Hitrust, or PCI is beneficial
• Experience with modern databases is an advantage
• Experience with scripting languages like bash, powershell, python, etc., is a plus
• Experience in technical leadership for Security, Software, DevOps, or SRE teams is advantageous
• A solid understanding of security best practices and a willingness to implement them across an infrastructure is beneficial