← All roles

DevSecOps / Cloud Engineer

Trial Library· Engineering
Apply on company site
Hybrid (San Francisco, CA)$168k - $205kFull-timePosted 2mo ago

About the role

DevSecOps / Cloud Engineer role on Trial Library's Infrastructure team, focusing on building AWS foundation with Terraform/Control Tower/AFT, owning security for PHI and Bedrock AI workloads, and delivering self-service tooling and guardrails for fast engineering delivery in a HIPAA-regulated environment.

Responsibilities

  • Infrastructure as code. The Terraform codebase - module design, state strategy, drift detection, plan review discipline - and the migration of our CloudFormation/Serverless footprint where it delivers real leverage, without stalling product delivery.
  • The AWS landing zone. Multi-account structure via Control Tower and AFT: account vending, customizations, service control policies, and OU design.
  • Security engineering. Security Hub, GuardDuty, Inspector, and Config as living detection tooling: triage findings, tune signals, and run the vulnerability lifecycle from discovery through verified fix. Coordinate penetration tests and own remediation.
  • Pipeline and supply chain security. Secure the commit-to-production path in GitHub Actions: least-privilege OIDC deployment roles, secrets scanning, SAST and dependency/container gates, branch protection, and artifact integrity.
  • Developer enablement. Paved-path tooling, self-service infrastructure, and secure defaults that let product engineers move fast without filing tickets.
  • Disaster recovery and backup. Backup strategy, RPO/RTO targets, Aurora point-in-time recovery, and regular DR testing to satisfy HIPAA contingency planning requirements.
  • Compliance as code. SOC 2 and HIPAA controls encoded into the platform - encryption, KMS, CloudTrail/Config coverage, log retention - with automated evidence collection.
  • Identity and access governance. IAM Identity Center, cross-account roles, SSO, periodic access reviews, and joiner/mover/leaver deprovisioning, alongside network foundations: VPC design, WAF, and Client VPN.

Qualifications

  • 5+ years in DevSecOps, security, platform, or infrastructure engineering, operating production systems you were accountable for
  • Demonstrated security ownership: vulnerability management, remediation of real findings, incident response participation
  • Deep Terraform proficiency: module hierarchies, multi-environment state, drift and refactors, critical plan review
  • Hands-on AFT and Control Tower experience - vended accounts through AFT and customized the pipeline
  • Broad AWS depth: IAM, Organizations, VPC, Lambda, RDS/Aurora, S3, KMS, CloudTrail, Config, Security Hub, GuardDuty, Secrets Manager
  • GitHub Actions as a daily environment, including pipeline hardening and secrets management
  • SOC 2 Type II and HIPAA experience in a real PHI-handling environment - owned controls, produced evidence, auditor-facing
  • Change and release discipline: deployment/rollback strategies in production within regulated constraints
  • Autonomous, hands-on, and able to document decisions and explain security tradeoffs to non-security colleagues
  • Use of AI coding and automation tools in daily work; curiosity about AI-augmented infrastructure and security practices
  • Genuine interest in improving clinical trial access and health equity

Skills

Required:TerraformAWS (multi-account, IAM, VPC, Lambda, RDS/Aurora, S3, KMS, CloudTrail, Config, Security Hub, GuardDuty)Control Tower / AWS Landing ZoneGitHub ActionsSecurity incident response & vulnerability managementCompliance frameworks (SOC 2, HIPAA)
Nice to have:AI tooling for infrastructure

Benefits

  • Health & Wellness: Comprehensive medical, dental, and vision coverage for employees and eligible dependents, disability, life, and supplemental insurance options
  • Time Off & Workplace Support: Flexible paid time off, company holidays, home office stipend
  • Financial & Lifestyle Benefits: 401(k), pre-tax HSA and FSA options, commuter benefits, financial wellness resources, legal protection plans
  • Additional Support & Voluntary Benefits: Pet wellness support, domestic partner coverage, and additional programs for diverse team needs
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Trial Library

The leading AI-powered solution for recruitment and retention in clinical trials, trusted by health care providers and patients.

At Trial Library, we partner with healthcare providers to enable the discoverability of clinical trials for patients everywhere.

AI-powered solutionsclinical trialsrecruitmentretentionhealthcare
Company profileWebsite

More open roles at Trial Library