Company & Job Overview

Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users.

The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment.

The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery.

Responsibilities

Cloud Infrastructure & Platform Engineering

• Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC) 
• Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs) 
• Design infrastructure for: 

1. Device connectivity platforms (IoT, MQTT ingestion) 
2. Web/mobile applications (portals, APIs) 
3. Data platforms (S3, RDS, Redshift) 

• Implement high availability, disaster recovery, and cost optimization strategies

CI/CD & Release Engineering

• Design and implement end-to-end CI/CD pipelines for: 

1. Backend services (APIs, microservices) 
2. Frontend applications (React portals, mobile apps) 
3. Infrastructure deployments (IaC pipelines) 

• Enable automated build, test, security scan, and deployment workflows 
• Implement progressive delivery strategies: 

1. Blue/Green deployments 
2. Canary releases 

• Integrate pipelines with tools such as: 

1. GitHub Actions / GitLab CI / Jenkins 
2. AWS CodePipeline / CodeBuild / CodeDeploy 

DevSecOps & Cybersecurity

• Embed security into the SDLC (“Shift Left Security”): 

1. SAST, DAST, dependency scanning 
2. Container security (ECR scanning, runtime protection) 

• Implement identity and access management (IAM) best practices 
• Design and enforce: 

1. Secrets management (AWS Secrets Manager, Parameter Store) 
2. Encryption (KMS, TLS/mTLS) 

• Enable device and platform security: Certificate lifecycle management (PKI, mTLS) 
• Support compliance with: FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST

Observability & Reliability Engineering

• Build and maintain observability stack: 

1. Metrics (CloudWatch) 
2. Logging (CloudWatch Logs, OpenSearch) 
3. Tracing (X-Ray, OpenTelemetry) 

• Define SLIs, SLOs, and alerting strategies 
• Enable proactive monitoring for: Device fleet health, Platform performance, Security anomalies 

Infrastructure Automation & Platform Enablement

• Develop reusable infrastructure modules using Terraform / CloudFormation 
• Build internal developer platform capabilities: 

1. Self-service infrastructure provisioning 
2. Standardized deployment templates 

• Enable developer productivity through Automated environments (dev/test/stage/prod) and Ephemeral environments for testing

Regulatory & Quality Compliance

• Ensure infrastructure and pipelines support: IEC 62304 , ISO 14971 risk management 
• Maintain: Traceability across build, test,  deployment, and Audit-ready logs and deployment records 
• Contribute to AAMI TIR45 aligned Agile processes

Collaboration & Leadership

• Partner with Platform engineering, Data engineering, Security and QA teams 
• Mentor engineers on DevOps and security best practices 
• Lead design reviews for infrastructure and deployment architecture

Required Skills & Abilities

Cloud & Infrastructure Expertise

• Deep experience with AWS services
• Compute: EC2, Lambda, ECS/EKS 
• Networking: VPC, ALB/NLB, PrivateLink 
• Storage: S3, EBS 
• Databases: RDS, Aurora PostgreSQL 
• Integration: API Gateway, EventBridge, SNS/SQS 
• Strong understanding of AWS Well-Architected Framework and multi-account cloud governance

CI/CD & DevOps Tooling

• Expertise in CI/CD tools: 
• GitHub Actions, GitLab CI, Jenkins 
• Containerization & orchestration: 
• Docker, Kubernetes (EKS preferred)

DevSecOps & Security

• Experience implementing secure SDLC pipelines, IAM least privilege models 
• Familiarity with threat modeling, Vulnerability management tools 

Observability & Reliability

• Experience with monitoring/logging tools: 
• CloudWatch, Prometheus, Grafana, OpenSearch 
• Strong understanding of: 
• Distributed systems reliability, Incident response and root cause analysis

AI-Assisted Engineering (Preferred)

• Experience leveraging tools such as GitHub Copilot, Claude / Codex 
• Ability to automate DevOps workflows, enhance code quality and testing using AI

Education & Experience

• Bachelor’s or master’s degree in computer science, Engineering, or related field 
• 5+ years of experience in Cloud infrastructure / DevOps / SRE and CI/CD pipeline design and automation 
• Experience in regulated environments (medical device or healthcare preferred) 
• Strong understanding of IEC 62304 , ISO 14971

Travel

• The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences.

Physical Requirements

• Sustained periods of time standing and sitting in a laboratory
• Sitting at a desk utilizing a computer
• Some lifting of<25 pounds

The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.