Xealth Logo

Xealth

DevSecOps Engineer

Posted 19 Days Ago
Remote or Hybrid
3 Locations
145K-160K Annually
Mid level
Remote or Hybrid
3 Locations
145K-160K Annually
Mid level
As a DevSecOps Engineer, you'll build and maintain secure cloud infrastructure, manage compliance, and enhance automation processes while collaborating with engineers and InfoSec.
The summary above was generated by AI
Our Mission & Culture

At Xealth, we’re revolutionizing healthcare by leveraging data and automation to empower care providers—building on EHRs such as Epic and Cerner—to seamlessly prescribe, deliver, and monitor digital health for patients. We are a detail-oriented team committed to maintaining high standards while moving with agility and impact.

We’re looking for an engineer who is passionate about building reliable, secure cloud infrastructure and eager to grow their skills across DevOps, security, and automation. If you thrive on learning, value collaboration, and want your work to improve health outcomes for millions, you’ll fit right in.

What You'll Own and Deliver (Responsibilities)

As a DevSecOps Engineer, you’ll work closely with our senior engineers and InfoSec team to build, maintain, and improve our cloud platform. You’ll take ownership of real deliverables from day one, with mentorship and guidance along the way.

Security & Compliance
  • Support the InfoSec team in running and triaging security scans using tools like Semgrep, Checkov, Lacework, or OWASP ZAP.
  • Develop familiarity with HIPAA and SOC2 compliance requirements and apply them to infrastructure work.
  • Participate in security reviews and help maintain a security-first development culture.
  • Support integration of ongoing BurpSuite testing.
Cloud Infrastructure & IaC
  • Contribute to and maintain our AWS infrastructure using Terraform, following established patterns for modularity and reusability.
  • Help implement self-scaling and self-healing configurations under the guidance of senior engineers.
  • Support VPC, EC2, ECS, EKS, IAM, S3, and SQS environments in a production HIPAA-regulated context.
CI/CD & Automation
  • Own and improve automation scripts and pipelines using Python or NodeJS, targeting manual toil reduction across the CI/CD lifecycle.
  • Assist in integrating security tooling (SAST/DAST/CSPM) into delivery pipelines without blocking developer velocity.
  • Identify repetitive manual tasks and propose or implement automation solutions.

Observability & Incident Response
  • Monitor infrastructure health using logging and metrics tooling (Prometheus, Grafana, LGTM stack) and respond to alerts.
  • Participate in on-call rotations with senior engineers and contribute to blameless post-mortems.
  • Help document root causes and implement lasting fixes, not just quick patches.
AI-Augmented Workflows
  • Leverage AI tools (GitHub Copilot, Claude) to accelerate IaC authoring, documentation, and code review.
  • Experiment with prompt-driven approaches including Gemini Enterprise to infrastructure tasks and share learnings with the team.
  • Work with agentic operations/agentic engineering tools. 
The Expertise You’ll BringCore Technology Stack
  • AWS Foundations: Hands-on experience with core services including VPC, EC2, ECS, IAM, S3, and SQS. EKS experience is a plus.
  • Infrastructure as Code: Working knowledge of Terraform; comfortable following and contributing to established module patterns.
  • Scripting & Automation: Proficiency in Python or NodeJS for writing clean, maintainable automation scripts.
  • Networking Basics: Solid understanding of VPC design, TLS/HTTPS, and network security fundamentals.
  • Security Tooling: Some exposure to SAST, DAST, or CSPM tools (e.g., Semgrep, Checkov, OWASP ZAP, Lacework, or CrowdStrike).
  • Observability: Familiarity with logging and monitoring concepts; experience with Prometheus, Grafana, or similar stacks is a plus.
Highly Valued (“Extra Mile”)
  • Regulated Environments: Any exposure to HIPAA, SOC2, or PCI-DSS compliance practices.
  • Kubernetes: Basic experience operating or deploying workloads in Kubernetes (EKS preferred).
  • GitOps: Awareness of pull-based deployment patterns (ArgoCD or Flux).
  • Certifications: AWS Solutions Architect Associate, AWS Developer Associate, or equivalent cloud certifications.
  • CI/CD Pipelines: Hands-on experience with GitHub Actions, Jenkins, or similar tools.

Why Join Xealth?
  • Pioneer Automation: This role offers the autonomy to build intelligent, self-driving infrastructure — the future of cloud operations.
  • Meaningful Work: Your engineering directly enables better patient care and health outcomes for millions.
  • Cutting-Edge Stack: Work with modern tools and a team that prioritizes technical excellence and continuous learning.
  • Best Workplace: Xealth has been named to the World's Best Digital Health Companies list by Newsweek, awarded gold in the Digital Health awards in 2024 and twice in 2023. In 2026 Xealth was also listed as one of BuiltIn's Best Places to Work, and one of Fierce Healthcare's Fierce 15 of 2023.
About Xealth
  • Xealth created the leading digital health platform helping health systems deliver connected, personalized care at scale. Embedded in the EHR, it enables clinicians to prescribe, automate, and measure the impact of digital tools--including apps, services, and wearable data--within existing workflows. Now part of Samsung's connected care vision, Xealth enhances decision-making, reduces friction, and supports enterprise-wide digital health strategies. Trusted by more than 500 hospitals and 70+ solution partners, Xealth provides a scalable foundation for delivering connected, personalized, and preventative care--empowering health systems to drive outcomes, engagement, and operational efficiency while advancing digital transformation.
  • As a market-leading digital health platform recognized for excellence and culture, some of our recent accolades include: Newsweek’s World’s Best Digital Health Companies (2024-2026), consecutive Gold Digital Health Awards, and we were named a BuiltIn Best Place to Work for 2025 and 2026.

Compensation & Benefits:

Xealth offers a multi-tiered approach when constructing a highly competitive compensation package. The compensation package would include a base salary, bonus, and a comprehensive suite of benefits. The base salary compensation range for this position is $145,000 - $160,000, depending on geographic market.

 Paid parental leave.
 Comprehensive medical, dental, and vision policies. Xealth covers 100% of employee premiums. We also provide Employee Assistance Programs.
Xealth provides your laptop and offers a home office stipend.
 Generous learning & development opportunities for you to grow your skills and career.
 401k Match: Xealth offers a dollar-for-dollar match up to 3%.
 Flexible time off & 10 standardized holidays.
 $500 yearly fitness stipend to spend on staying active.
Xealth is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures.

*Please note - you MUST be a U.S. Citizen or Permanent Resident to be hired*
Xealth is open to hiring in the following states - Arizona, California, Idaho, Massachusetts, Minnesota, Missouri, New Jersey, North Carolina, Ohio, Oregon, Pennsylvania, Texas, Utah, Washington, Wisconsin. 

HQ

Xealth Seattle, Washington, USA Office

We are in the historic Smith Tower in Pioneer Square surrounded by great restaurants, Puget Sound views, and great access to public transit.

Similar Jobs

4 Days Ago
Remote
USA
Senior level
Senior level
Software
Lead DevSecOps engineer responsible for designing and operating CI/CD pipelines, IaC, container orchestration, and observability for an AWS-based, event-driven platform. Implement security best practices, integrate scanning into pipelines, support Kafka/MSK and WebSocket services, drive reliability and scaling, mentor engineers, and establish CI/CD and IaC standards across teams.
Top Skills: AWSBitbucketConsulDockerElasticsearchElkGrafanaIamJenkinsKafka/MskKibanaKubernetesNexusPackerPrometheusTerraformVaultWebsocket
4 Days Ago
Remote
USA
Junior
Junior
Software
Support CI/CD, infrastructure automation, and observability for an AWS cloud-native platform. Build and maintain Jenkins/Bitbucket pipelines, IaC with Terraform/Packer, container orchestration with Docker/Kubernetes, observability stacks, secrets management, and Kafka/MSK support. Integrate security scanning into pipelines and collaborate with engineers to improve reliability, monitoring, and deployment automation.
Top Skills: AWSBitbucketConsulDockerElasticsearchGitGrafanaIamJenkinsKafkaKibanaKubernetesMskNexusPackerPrometheusTerraformVaultWebsocket
11 Days Ago
Remote
US
108K-195K Annually
Senior level
108K-195K Annually
Senior level
Information Technology • Software
Build, automate, and sustain secure CI/CD pipelines and hardened Kubernetes environments for DoD/Navy contexts. Automate security artifacts (SBOM, CVE scanning), enforce DISA STIG compliance, enable GitOps/IaC practices, support ATO evidence automation, and embed security in development. Contribute to feature code when needed and maintain version-controlled operational documentation.
Top Skills: Ai ToolingBashCve ScanningDisa StigGitlab CiGitopsGrafanaHelmK3SKubernetesPrometheusPythonRhelRke2Rocky LinuxSbom GenerationSealed SecretsSopsTerraformVault

What you need to know about the Seattle Tech Scene

Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.

Key Facts About Seattle Tech

  • Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Amazon, Microsoft, Meta, Google
  • Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
  • Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Madrona, Fuse, Tola, Maveron
  • Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account