H-1B Visa Devsecops Engineer Jobs
DevSecOps Engineer roles sit at the intersection of software development, security, and infrastructure, a combination that qualifies as a specialty occupation under H-1B requirements. Employers in financial services, cloud infrastructure, and defense contracting are among the most active H-1B sponsors for this role. Most positions require a bachelor's degree in computer science, cybersecurity, or a related engineering field.
See All Devsecops Engineer JobsOverview
Showing 5 of 47+ Devsecops Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 47+ Devsecops Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsCompany & Job Overview
Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users.
The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment.
The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery.
Responsibilities
Cloud Infrastructure & Platform Engineering
- Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC)
- Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs)
- Design infrastructure for:
- Device connectivity platforms (IoT, MQTT ingestion)
- Web/mobile applications (portals, APIs)
- Data platforms (S3, RDS, Redshift)
- Implement high availability, disaster recovery, and cost optimization strategies
CI/CD & Release Engineering
- Design and implement end-to-end CI/CD pipelines for:
- Backend services (APIs, microservices)
- Frontend applications (React portals, mobile apps)
- Infrastructure deployments (IaC pipelines)
- Enable automated build, test, security scan, and deployment workflows
- Implement progressive delivery strategies:
- Blue/Green deployments
- Canary releases
- Integrate pipelines with tools such as:
- GitHub Actions / GitLab CI / Jenkins
- AWS CodePipeline / CodeBuild / CodeDeploy
DevSecOps & Cybersecurity
- Embed security into the SDLC (“Shift Left Security”):
- SAST, DAST, dependency scanning
- Container security (ECR scanning, runtime protection)
- Implement identity and access management (IAM) best practices
- Design and enforce:
- Secrets management (AWS Secrets Manager, Parameter Store)
- Encryption (KMS, TLS/mTLS)
- Enable device and platform security:
- Certificate lifecycle management (PKI, mTLS)
- Support compliance with:
- FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST
Observability & Reliability Engineering
- Build and maintain observability stack:
- Metrics (CloudWatch)
- Logging (CloudWatch Logs, OpenSearch)
- Tracing (X-Ray, OpenTelemetry)
- Define SLIs, SLOs, and alerting strategies
- Enable proactive monitoring for:
- Device fleet health, Platform performance, Security anomalies
Infrastructure Automation & Platform Enablement
- Develop reusable infrastructure modules using:
- Terraform / CloudFormation
- Build internal developer platform capabilities:
- Self-service infrastructure provisioning
- Standardized deployment templates
- Enable developer productivity through:
- Automated environments (dev/test/stage/prod)
- Ephemeral environments for testing
Regulatory & Quality Compliance
- Ensure infrastructure and pipelines support:
- IEC 62304, ISO 14971 risk management
- Maintain:
- Traceability across build, test, and deployment
- Audit-ready logs and deployment records
- Contribute to AAMI TIR45 aligned Agile processes
Collaboration & Leadership
- Partner with:
- Platform engineering, Data engineering, Security and QA teams
- Mentor engineers on DevOps and security best practices
- Lead design reviews for infrastructure and deployment architecture
Required Skills & Abilities
Cloud & Infrastructure Expertise
- Deep experience with AWS services:
- Compute: EC2, Lambda, ECS/EKS
- Networking: VPC, ALB/NLB, PrivateLink
- Storage: S3, EBS
- Databases: RDS, Aurora PostgreSQL
- Integration: API Gateway, EventBridge, SNS/SQS
- Strong understanding of:
- AWS Well-Architected Framework
- Multi-account cloud governance
CI/CD & DevOps Tooling
- Expertise in CI/CD tools:
- GitHub Actions, GitLab CI, Jenkins
- Containerization & orchestration:
- Docker, Kubernetes (EKS preferred)
DevSecOps & Security
- Experience implementing:
- Secure SDLC pipelines, IAM least privilege models
- Familiarity with:
- Threat modeling, Vulnerability management tools
Observability & Reliability
- Experience with monitoring/logging tools:
- CloudWatch, Prometheus, Grafana, OpenSearch
- Strong understanding of:
- Distributed systems reliability, Incident response and root cause analysis
AI-Assisted Engineering (Preferred)
- Experience leveraging tools such as:
- GitHub Copilot, Claude / Codex
- Ability to:
- Automate DevOps workflows, enhance code quality and testing using AI
Education & Experience
Bachelor’s or master’s degree in computer science, Engineering, or related field
- 5+ years of experience in:
- Cloud infrastructure / DevOps / SRE
- CI/CD pipeline design and automation
- Experience in regulated environments (medical device or healthcare preferred)
- Strong understanding of:
- IEC 62304, ISO 14971
Travel
- The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences.
Physical Requirements
- Sustained periods of time standing and sitting in a laboratory
- Sitting at a desk utilizing a computer
- Some lifting of <25 pounds
The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.
Company & Job Overview
Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users.
The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment.
The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery.
Responsibilities
Cloud Infrastructure & Platform Engineering
- Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC)
- Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs)
- Design infrastructure for:
- Device connectivity platforms (IoT, MQTT ingestion)
- Web/mobile applications (portals, APIs)
- Data platforms (S3, RDS, Redshift)
- Implement high availability, disaster recovery, and cost optimization strategies
CI/CD & Release Engineering
- Design and implement end-to-end CI/CD pipelines for:
- Backend services (APIs, microservices)
- Frontend applications (React portals, mobile apps)
- Infrastructure deployments (IaC pipelines)
- Enable automated build, test, security scan, and deployment workflows
- Implement progressive delivery strategies:
- Blue/Green deployments
- Canary releases
- Integrate pipelines with tools such as:
- GitHub Actions / GitLab CI / Jenkins
- AWS CodePipeline / CodeBuild / CodeDeploy
DevSecOps & Cybersecurity
- Embed security into the SDLC (“Shift Left Security”):
- SAST, DAST, dependency scanning
- Container security (ECR scanning, runtime protection)
- Implement identity and access management (IAM) best practices
- Design and enforce:
- Secrets management (AWS Secrets Manager, Parameter Store)
- Encryption (KMS, TLS/mTLS)
- Enable device and platform security:
- Certificate lifecycle management (PKI, mTLS)
- Support compliance with:
- FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST
Observability & Reliability Engineering
- Build and maintain observability stack:
- Metrics (CloudWatch)
- Logging (CloudWatch Logs, OpenSearch)
- Tracing (X-Ray, OpenTelemetry)
- Define SLIs, SLOs, and alerting strategies
- Enable proactive monitoring for:
- Device fleet health, Platform performance, Security anomalies
Infrastructure Automation & Platform Enablement
- Develop reusable infrastructure modules using:
- Terraform / CloudFormation
- Build internal developer platform capabilities:
- Self-service infrastructure provisioning
- Standardized deployment templates
- Enable developer productivity through:
- Automated environments (dev/test/stage/prod)
- Ephemeral environments for testing
Regulatory & Quality Compliance
- Ensure infrastructure and pipelines support:
- IEC 62304, ISO 14971 risk management
- Maintain:
- Traceability across build, test, and deployment
- Audit-ready logs and deployment records
- Contribute to AAMI TIR45 aligned Agile processes
Collaboration & Leadership
- Partner with:
- Platform engineering, Data engineering, Security and QA teams
- Mentor engineers on DevOps and security best practices
- Lead design reviews for infrastructure and deployment architecture
Required Skills & Abilities
Cloud & Infrastructure Expertise
- Deep experience with AWS services:
- Compute: EC2, Lambda, ECS/EKS
- Networking: VPC, ALB/NLB, PrivateLink
- Storage: S3, EBS
- Databases: RDS, Aurora PostgreSQL
- Integration: API Gateway, EventBridge, SNS/SQS
- Strong understanding of:
- AWS Well-Architected Framework
- Multi-account cloud governance
CI/CD & DevOps Tooling
- Expertise in CI/CD tools:
- GitHub Actions, GitLab CI, Jenkins
- Containerization & orchestration:
- Docker, Kubernetes (EKS preferred)
DevSecOps & Security
- Experience implementing:
- Secure SDLC pipelines, IAM least privilege models
- Familiarity with:
- Threat modeling, Vulnerability management tools
Observability & Reliability
- Experience with monitoring/logging tools:
- CloudWatch, Prometheus, Grafana, OpenSearch
- Strong understanding of:
- Distributed systems reliability, Incident response and root cause analysis
AI-Assisted Engineering (Preferred)
- Experience leveraging tools such as:
- GitHub Copilot, Claude / Codex
- Ability to:
- Automate DevOps workflows, enhance code quality and testing using AI
Education & Experience
Bachelor’s or master’s degree in computer science, Engineering, or related field
- 5+ years of experience in:
- Cloud infrastructure / DevOps / SRE
- CI/CD pipeline design and automation
- Experience in regulated environments (medical device or healthcare preferred)
- Strong understanding of:
- IEC 62304, ISO 14971
Travel
- The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences.
Physical Requirements
- Sustained periods of time standing and sitting in a laboratory
- Sitting at a desk utilizing a computer
- Some lifting of <25 pounds
The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.
See all 47+ Devsecops Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Devsecops Engineer
Verify your role meets specialty occupation criteria
DevSecOps spans development, security, and ops, USCIS scrutinizes whether the position genuinely requires a bachelor's degree in a specific field. Pull the O*NET profile for your job code and confirm your offer letter ties responsibilities directly to your degree discipline.
Target employers with active LCA filing history
Use Migrate Mate to filter DevSecOps roles by verified DOL Labor Condition Application filings, so you're applying to employers who have already committed to the H-1B process for this job category rather than those encountering it for the first time.
Check prevailing wage before accepting an offer
Your employer must pay at least the DOL prevailing wage for your exact SOC code and work location. Run your title and metro area through the OFLC Wage Search before negotiating, underpaying relative to the certified wage invalidates the LCA and stalls your petition.
Prioritize E-Verify enrolled employers early
If you're transitioning from OPT or STEM OPT, your employer must be enrolled in E-Verify to remain eligible. Confirm enrollment status during the offer stage, not after signing, re-enrollment delays can compress your cap-gap window.
Document security clearance eligibility proactively
Defense and government contractors sponsoring H-1B DevSecOps engineers often require eligibility for at least a Secret clearance. Confirm your citizenship status and disclosure requirements upfront, many employers will not start an H-1B petition for roles requiring clearances you cannot legally hold.
File Form I-129 with a detailed specialty occupation memo
USCIS issues Requests for Evidence on DevSecOps petitions when the job duties blend generalist IT tasks with security work. Your employer's attorney should include a position analysis letter mapping each duty to a specific degree requirement in cybersecurity or computer science.
Devsecops Engineer jobs are hiring across the US. Find yours.
Find Devsecops Engineer JobsDevsecops Engineer H-1B Visa: Frequently Asked Questions
Does a DevSecOps Engineer role qualify as a specialty occupation for H-1B purposes?
Yes, in most cases. USCIS evaluates whether the position normally requires a bachelor's degree or higher in a specific field, computer science, cybersecurity, or software engineering typically satisfy that standard for DevSecOps roles. The risk arises when job duties are broadly worded and include generalist IT or operations tasks that don't require a specialized degree, which can trigger a Request for Evidence.
Which industries sponsor H-1B visas most frequently for DevSecOps Engineers?
Financial services, cloud infrastructure providers, defense contractors, and health technology companies are among the most consistent H-1B sponsors for DevSecOps roles, based on DOL LCA disclosure data. These industries handle regulated data and face compliance requirements that create sustained demand for security-integrated engineering talent. You can browse verified H-1B sponsoring employers for this role directly on Migrate Mate.
How does a security clearance requirement affect H-1B sponsorship for DevSecOps roles?
Many federal contractors require at least a Secret clearance for DevSecOps positions. H-1B holders can hold some clearance levels, but the process is longer and not guaranteed. Employers in the cleared space often prefer sponsoring permanent residency over H-1B because of the timeline mismatch. Confirm clearance requirements before applying, roles listed as requiring a clearance without stating eligibility for H-1B holders usually screen them out.
What SOC code applies to DevSecOps Engineer roles for LCA filing purposes?
Most DevSecOps Engineer positions are filed under SOC 15-1212 (Information Security Analysts) or 15-1252 (Software Developers), depending on whether the role is predominantly security-focused or development-focused. Your employer selects the code when filing the LCA with DOL, and it determines the prevailing wage level. Verify the code used in your LCA before your I-129 petition is filed, as a mismatch between duties and SOC code is a common RFE trigger.
Can I change employers on H-1B while working as a DevSecOps Engineer?
Yes, H-1B portability under AC21 lets you start working for a new employer as soon as they file an I-129 transfer petition, without waiting for approval, provided your original petition has been approved and you've maintained valid status. The new employer must file a new LCA and petition for the DevSecOps role at your new work location, since prevailing wages vary by metro area and any change in duties may affect the specialty occupation determination.
See which Devsecops Engineer employers are hiring and sponsoring visas right now.
Search Devsecops Engineer Jobs