Senior DevOps & Security Engineer

About Synapticure Synapticure is the largest, most comprehensive specialty care and life sciences company in the country for those living with neurodegenerative diseases. Founded by patients and caregivers living with these diseases, we are redefining the care and the research paradigm for conditions like Alzheimer's, Parkinson's, and ALS in all 50 states. Our business is powered by two connected engines. The CARES Engine (Clinical Operations) A scalable, 50-state virtualized clinical network providing timely access to expert neurologists and cutting edge treatments with wraparound care coordination and behavioral health support. Our team creates personalized care plans focused on education and empowerment, connecting patients with a multidisciplinary team of subspecialty neurologists, geriatricians, psychologists, and care coordinators who collaborate to deliver comprehensive care. The CURES Engine (Research & Innovation) Leveraging our deeply engaged, well characterized national patient cohort, CURES partners with life science, pharma, biotech, and medical device companies to accelerate the development of neurodegenerative treatments, spanning discovery stage lab services, clinical trial services, and real world evidence data and analytics. Partnering with providers, health plans, and life sciences companies, including CMS' GUIDE dementia care model, Synapticure is dedicated to transforming the lives of millions of individuals and their families living with neurodegenerative diseases.

The Senior DevOps & Security Engineer is a hands-on technical role responsible for building, operating, securing, automating, and improving our cloud infrastructure and software delivery environments. Reporting to the Director of IT, DevOps & Security, this role works across Engineering, Data, and other teams to maintain secure, reliable, and well-monitored systems. The role focuses heavily on cloud security, compliance, vulnerability management, AWS, Terraform, Kubernetes, CI/CD, observability, and production reliability. This is a strong fit for someone who enjoys working across cloud infrastructure, security engineering, compliance, and broader technical problem-solving.

Translate security and compliance requirements into practical technical controls and directly support HIPAA, SOC 2, and related activities. Build, maintain, secure, and improve AWS infrastructure, Kubernetes/EKS environments, identity and access controls (IAM), networking, databases, storage, logging, monitoring, and SIEM integrations. Develop and maintain Terraform, secure CI/CD pipelines, deployment tooling, and related automation. Manage vulnerability scanning, security telemetry, incident response support, and application/infrastructure hardening. Partner with Engineering, Data, and other internal teams to automate workflows, connect systems, and reduce manual work. Build scripts, integrations, internal tools, and API-based automations across technical and business systems. Maintain clear technical documentation, architecture diagrams, and infrastructure security standards. Research and evaluate new tools, security practices, and infrastructure approaches to determine how they can be applied effectively in our environment. Participate in on-call or escalation coverage as operational needs evolve. Our production environment is generally stable and relatively low-traffic, so after-hours work tends to focus more on planned maintenance, upgrades, and proactive security improvements than on responding to outages.

4+ years of experience in cloud security engineering, DevOps, cloud infrastructure, SRE, or a related field. Strong understanding of cloud security, IAM, networking, vulnerability management, observability, and incident response. Hands-on experience supporting or implementing security controls in regulated environments (e.g., HIPAA, SOC 2). Hands-on experience with SentinelOne (or similar EDR/endpoint security platforms), AWS, Terraform, Kubernetes, and securing CI/CD pipelines. Ability to write scripts (Python, Bash, etc.) and work with APIs, integrations, and security automation. Excellent written and verbal communication skills, with a proven ability to produce clear technical writing, architecture documentation, and cross-functional collaboration. Ability to work independently, research unfamiliar problems, and take projects from problem definition through implementation.

Experience in healthcare, healthtech, financial services, or another highly regulated sector. Familiarity with tools such as Datadog, SentinelOne, Argo CD, GitHub Actions, or Google Workspace administration. Direct experience with SIEM setup, detection engineering, or penetration testing remediation. Background in disaster recovery planning and backup restoration testing.

laptop-ats-crawler v3