SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wider Circle is seeking a DevSecOps Engineer to bridge information security, cloud engineering, and IT operations. This is a high-ownership role at a Series B healthtech company that connects healthcare plan members with community care programs. The company handles protected health information, holds HITRUST certification, and is working toward SOC 2 compliance.
You will own three interconnected domains:
IT and Endpoint Operations: Administer Google Workspace and endpoint management tooling across a fully remote, mixed-OS fleet (Windows, macOS, Chromebook). Manage complete device lifecycle—provisioning, enrollment, policy enforcement, decommissioning—with repeatable scripting. Execute access changes for hiring, role changes, and terminations with clean audit trails. Improve asset record accuracy through process automation.
Security Operations: Run vulnerability management cycles across AWS and endpoints, analyzing findings and collaborating on remediation. Triage incoming security alerts to determine severity and route appropriately. Review cloud configurations against compliance baselines. Execute periodic access reviews and collect compliance evidence.
DevOps and Cloud Infrastructure: Make hands-on AWS changes—IAM, networking, encryption, logging, storage, databases. Migrate infrastructure to Terraform to reduce console-only configurations. Own legacy cloud sprawl cleanup, including stakeholder conversations, impact testing, and documentation.
Process and Documentation: Convert tribal knowledge into runbooks others can follow. Maintain procedures, standards, and technical documentation that satisfy auditors. Organize control evidence for HITRUST and SOC 2 programs.
You bring 3–5 years of hands-on experience spanning at least two of: security operations, cloud infrastructure, or IT systems administration, with genuine curiosity about the third. You have production AWS and/or Google Workspace experience, understand blast radius before making changes, and know your investigation tools. You write Python or Bash to automate tasks, parse exports, and reconcile systems. You have systems administration depth in identity/endpoint management (Google Workspace, MDM, or EDR). Most importantly, you write clearly enough that strangers can follow your instructions, and you own cross-functional remediation to completion—not just raising tickets. You're comfortable in an environment with real consequences: the company serves elderly and vulnerable populations, so accuracy matters.
