DevSecOps/DevOps Engineer

Join Caspar Health, a digital rehabilitation clinic that combines medical expertise with high-end engineering. As a DevSecOps/DevOps Engineer, you will play a crucial role in enabling medical professionals to deliver life-changing therapy to patients in need. Your responsibilities will include triaging security alerts, integrating automated security testing into CI/CD pipelines, evolving our AWS infrastructure, automating compliance, managing data layers, and collaborating with development squads to identify and remediate vulnerabilities. Enjoy a flexible work environment, a permanent employment contract, and various benefits focused on diversity, inclusion, and personal growth.

• Lead the triaging of security alerts and vulnerabilities, coordinating smart remediations and building systems to prevent reoccurrence.
• Integrate automated security testing, vulnerability scanning, and compliance checks directly into CI/CD pipelines, championing the "Shift-Left" approach.
• Manage and harden data layers (PostgreSQL, Redis) and orchestrate the K8s environment with a zero-trust mindset, ensuring security is a priority.
• We are looking for a DevSecOps/DevOps Engineer (all identities) with strong application and infrastructure security skills
• We welcome experienced DevOps Engineers who bring solid security knowledge — understanding of common vulnerabilities, application security issues, and infrastructure hardening — and are ready to grow into a full DevSecOps role
• You are an automation enthusiast: You prefer writing Terraform or Python scripts over manual configurations any day of the week
• You are a bridge-builder: You enjoy working at the intersection of Development and Operations, helping teams "shift-left" without slowing them down
• You live and breathe Cloud Security: You have a solid foundation in AWS and believe that infrastructure is only as good as its security-first design
• The Security Mindset: You don’t just build pipelines; you wonder how someone might break them. You’re familiar with encryption, network segmentation, and secure access protocols
• The DevOps Foundation: You have a proven track record in AWS environments, managing Infrastructure as Code (Terraform) and containers (Docker/K8s)
• The Communicator: You can explain complex security risks to a developer in a way that inspires them to fix it. (English is our working language)
• The solid understanding of infrastructure security: secure configurations, network segmentation, encryption at rest and in transit, access controls
• A strong knowledge of application security: common vulnerabilities (OWASP Top 10), secure coding practices, dependency scanning, and remediation
• The Problem Solver: You enjoy Linux administration and can automate tasks using Python, Go, or Node.js
• Note to DevOps Engineers: If your background is primarily in infrastructure but you have a strong desire to deepen your application security skills, we encourage you to apply. We value your curiosity and will support your growth into a full DevSecOps role