Devsecops Engineer Jobs in USA with Visa Sponsorship
DevSecOps Engineers are strong H-1B visa candidates, the role meets USCIS specialty occupation standards through its required expertise in cloud security, CI/CD pipelines, and infrastructure automation. Employers actively sponsor because qualified candidates are genuinely scarce. For detailed occupation requirements, see the O*NET profile.
See All Devsecops Engineer JobsOverview
Showing 5 of 51+ Devsecops Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 51+ Devsecops Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsCompany & Job Overview
Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users.
The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment.
The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery.
Responsibilities
Cloud Infrastructure & Platform Engineering
- Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC)
- Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs)
- Design infrastructure for:
- Device connectivity platforms (IoT, MQTT ingestion)
- Web/mobile applications (portals, APIs)
- Data platforms (S3, RDS, Redshift)
- Implement high availability, disaster recovery, and cost optimization strategies
CI/CD & Release Engineering
- Design and implement end-to-end CI/CD pipelines for:
- Backend services (APIs, microservices)
- Frontend applications (React portals, mobile apps)
- Infrastructure deployments (IaC pipelines)
- Enable automated build, test, security scan, and deployment workflows
- Implement progressive delivery strategies:
- Blue/Green deployments
- Canary releases
- Integrate pipelines with tools such as:
- GitHub Actions / GitLab CI / Jenkins
- AWS CodePipeline / CodeBuild / CodeDeploy
DevSecOps & Cybersecurity
- Embed security into the SDLC (“Shift Left Security”):
- SAST, DAST, dependency scanning
- Container security (ECR scanning, runtime protection)
- Implement identity and access management (IAM) best practices
- Design and enforce:
- Secrets management (AWS Secrets Manager, Parameter Store)
- Encryption (KMS, TLS/mTLS)
- Enable device and platform security:
- Certificate lifecycle management (PKI, mTLS)
- Support compliance with:
- FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST
Observability & Reliability Engineering
- Build and maintain observability stack:
- Metrics (CloudWatch)
- Logging (CloudWatch Logs, OpenSearch)
- Tracing (X-Ray, OpenTelemetry)
- Define SLIs, SLOs, and alerting strategies
- Enable proactive monitoring for:
- Device fleet health, Platform performance, Security anomalies
Infrastructure Automation & Platform Enablement
- Develop reusable infrastructure modules using:
- Terraform / CloudFormation
- Build internal developer platform capabilities:
- Self-service infrastructure provisioning
- Standardized deployment templates
- Enable developer productivity through:
- Automated environments (dev/test/stage/prod)
- Ephemeral environments for testing
Regulatory & Quality Compliance
- Ensure infrastructure and pipelines support:
- IEC 62304, ISO 14971 risk management
- Maintain:
- Traceability across build, test, and deployment
- Audit-ready logs and deployment records
- Contribute to AAMI TIR45 aligned Agile processes
Collaboration & Leadership
- Partner with:
- Platform engineering, Data engineering, Security and QA teams
- Mentor engineers on DevOps and security best practices
- Lead design reviews for infrastructure and deployment architecture
Required Skills & Abilities
Cloud & Infrastructure Expertise
- Deep experience with AWS services:
- Compute: EC2, Lambda, ECS/EKS
- Networking: VPC, ALB/NLB, PrivateLink
- Storage: S3, EBS
- Databases: RDS, Aurora PostgreSQL
- Integration: API Gateway, EventBridge, SNS/SQS
- Strong understanding of:
- AWS Well-Architected Framework
- Multi-account cloud governance
CI/CD & DevOps Tooling
- Expertise in CI/CD tools:
- GitHub Actions, GitLab CI, Jenkins
- Containerization & orchestration:
- Docker, Kubernetes (EKS preferred)
DevSecOps & Security
- Experience implementing:
- Secure SDLC pipelines, IAM least privilege models
- Familiarity with:
- Threat modeling, Vulnerability management tools
Observability & Reliability
- Experience with monitoring/logging tools:
- CloudWatch, Prometheus, Grafana, OpenSearch
- Strong understanding of:
- Distributed systems reliability, Incident response and root cause analysis
AI-Assisted Engineering (Preferred)
- Experience leveraging tools such as:
- GitHub Copilot, Claude / Codex
- Ability to:
- Automate DevOps workflows, enhance code quality and testing using AI
Education & Experience
Bachelor’s or master’s degree in computer science, Engineering, or related field
- 5+ years of experience in:
- Cloud infrastructure / DevOps / SRE
- CI/CD pipeline design and automation
- Experience in regulated environments (medical device or healthcare preferred)
- Strong understanding of:
- IEC 62304, ISO 14971
Travel
- The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences.
Physical Requirements
- Sustained periods of time standing and sitting in a laboratory
- Sitting at a desk utilizing a computer
- Some lifting of <25 pounds
The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.
Company & Job Overview
Diality is a medical device company focused on developing solutions to improve lives impacted by kidney disease. Diality offers the Moda-flx Hemodialysis System, a user-friendly, mobile, and connected hemodialysis system designed to maximize clinical flexibility and ease-of-use for both clinical and non-clinical users.
The DevSecOps Engineer will lead the design, implementation, and continuous improvement of cloud infrastructure, CI/CD pipelines, and security engineering practices for Diality’s digital health platform. This role is critical in enabling secure, scalable, and compliant delivery of cloud-native applications, device connectivity platforms, and data systems in a regulated medical device environment.
The ideal candidate brings deep expertise in AWS cloud infrastructure, automation, DevSecOps, and cybersecurity, with experience operating within HIPAA and FDA-regulated environments, and a strong focus on enabling high-velocity, high-quality software delivery.
Responsibilities
Cloud Infrastructure & Platform Engineering
- Design, implement, and manage scalable, secure AWS cloud infrastructure using Infrastructure as Code (IaC)
- Build and maintain multi-account AWS environments with proper governance (Landing Zone, Control Tower, SCPs)
- Design infrastructure for:
- Device connectivity platforms (IoT, MQTT ingestion)
- Web/mobile applications (portals, APIs)
- Data platforms (S3, RDS, Redshift)
- Implement high availability, disaster recovery, and cost optimization strategies
CI/CD & Release Engineering
- Design and implement end-to-end CI/CD pipelines for:
- Backend services (APIs, microservices)
- Frontend applications (React portals, mobile apps)
- Infrastructure deployments (IaC pipelines)
- Enable automated build, test, security scan, and deployment workflows
- Implement progressive delivery strategies:
- Blue/Green deployments
- Canary releases
- Integrate pipelines with tools such as:
- GitHub Actions / GitLab CI / Jenkins
- AWS CodePipeline / CodeBuild / CodeDeploy
DevSecOps & Cybersecurity
- Embed security into the SDLC (“Shift Left Security”):
- SAST, DAST, dependency scanning
- Container security (ECR scanning, runtime protection)
- Implement identity and access management (IAM) best practices
- Design and enforce:
- Secrets management (AWS Secrets Manager, Parameter Store)
- Encryption (KMS, TLS/mTLS)
- Enable device and platform security:
- Certificate lifecycle management (PKI, mTLS)
- Support compliance with:
- FDA Cybersecurity Guidance, HIPAA, ISO 27001 / HITRUST
Observability & Reliability Engineering
- Build and maintain observability stack:
- Metrics (CloudWatch)
- Logging (CloudWatch Logs, OpenSearch)
- Tracing (X-Ray, OpenTelemetry)
- Define SLIs, SLOs, and alerting strategies
- Enable proactive monitoring for:
- Device fleet health, Platform performance, Security anomalies
Infrastructure Automation & Platform Enablement
- Develop reusable infrastructure modules using:
- Terraform / CloudFormation
- Build internal developer platform capabilities:
- Self-service infrastructure provisioning
- Standardized deployment templates
- Enable developer productivity through:
- Automated environments (dev/test/stage/prod)
- Ephemeral environments for testing
Regulatory & Quality Compliance
- Ensure infrastructure and pipelines support:
- IEC 62304, ISO 14971 risk management
- Maintain:
- Traceability across build, test, and deployment
- Audit-ready logs and deployment records
- Contribute to AAMI TIR45 aligned Agile processes
Collaboration & Leadership
- Partner with:
- Platform engineering, Data engineering, Security and QA teams
- Mentor engineers on DevOps and security best practices
- Lead design reviews for infrastructure and deployment architecture
Required Skills & Abilities
Cloud & Infrastructure Expertise
- Deep experience with AWS services:
- Compute: EC2, Lambda, ECS/EKS
- Networking: VPC, ALB/NLB, PrivateLink
- Storage: S3, EBS
- Databases: RDS, Aurora PostgreSQL
- Integration: API Gateway, EventBridge, SNS/SQS
- Strong understanding of:
- AWS Well-Architected Framework
- Multi-account cloud governance
CI/CD & DevOps Tooling
- Expertise in CI/CD tools:
- GitHub Actions, GitLab CI, Jenkins
- Containerization & orchestration:
- Docker, Kubernetes (EKS preferred)
DevSecOps & Security
- Experience implementing:
- Secure SDLC pipelines, IAM least privilege models
- Familiarity with:
- Threat modeling, Vulnerability management tools
Observability & Reliability
- Experience with monitoring/logging tools:
- CloudWatch, Prometheus, Grafana, OpenSearch
- Strong understanding of:
- Distributed systems reliability, Incident response and root cause analysis
AI-Assisted Engineering (Preferred)
- Experience leveraging tools such as:
- GitHub Copilot, Claude / Codex
- Ability to:
- Automate DevOps workflows, enhance code quality and testing using AI
Education & Experience
Bachelor’s or master’s degree in computer science, Engineering, or related field
- 5+ years of experience in:
- Cloud infrastructure / DevOps / SRE
- CI/CD pipeline design and automation
- Experience in regulated environments (medical device or healthcare preferred)
- Strong understanding of:
- IEC 62304, ISO 14971
Travel
- The willingness to travel domestically as needed (up to 10%) primarily to visit vendors and attendance at select conferences.
Physical Requirements
- Sustained periods of time standing and sitting in a laboratory
- Sitting at a desk utilizing a computer
- Some lifting of <25 pounds
The information contained in this job description is for compliance with the Americans with Disabilities Act (ADA) and is not an exhaustive list of duties performed for this position.
See all 51+ Devsecops Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Devsecops Engineer
Frame your skills around the specialty occupation standard
USCIS approves H-1B petitions when the role requires a specific bachelor's degree or higher. Emphasize that your position demands a degree in computer science, cybersecurity, or information systems, not just general IT experience.
Target employers with a proven H-1B track record
Large tech firms, defense contractors, and financial institutions file H-1B petitions for DevSecOps roles regularly. Companies with established immigration programs move faster and make fewer petition errors than first-time sponsors.
Certifications strengthen your petition, not just your resume
CISSP, AWS Security Specialty, and CKS certifications signal specialized knowledge that supports the specialty occupation argument. Include them in your visa documentation, not just your job applications, they reinforce degree equivalency.
Address the security clearance question early
Some DevSecOps roles require U.S. security clearances, which visa holders typically cannot obtain. Clarify clearance requirements before investing time in the application process to avoid late-stage rejections.
Get your job description language right before the LCA is filed
The Labor Condition Application must reflect actual job duties. Vague descriptions like 'supports security operations' are weaker than 'designs and implements automated vulnerability scanning pipelines in Kubernetes environments.' Work with your employer on specificity.
Use Migrate Mate to filter for verified sponsoring employers
Not every job posting that lists DevSecOps duties is from a company willing to sponsor. Migrate Mate surfaces roles from employers who have sponsored visas before, saving you from applying to positions that will stall at the immigration stage.
Devsecops Engineer jobs are hiring across the US. Find yours.
Find Devsecops Engineer JobsFrequently Asked Questions
Does DevSecOps qualify as a specialty occupation for H-1B purposes?
Yes, DevSecOps Engineer consistently qualifies as a specialty occupation under USCIS standards. The role requires theoretical and practical application of highly specialized knowledge in security engineering, cloud infrastructure, and software development, and a bachelor's degree or higher in computer science, cybersecurity, or a closely related field is a normal industry requirement for entry into the position.
What degree do I need for an employer to sponsor my H-1B as a DevSecOps Engineer?
A bachelor's degree in computer science, information security, software engineering, or a related technical field is the standard requirement. If your degree is in a different field, substantial coursework in security or systems combined with relevant certifications (CISSP, AWS Security Specialty) may support the petition, but your employer's immigration attorney will need to build that argument carefully.
Are DevSecOps roles harder to sponsor than general software engineering roles?
Not harder, but more scrutinized. USCIS pays close attention to job descriptions that blend operations and development, sometimes questioning whether the role is truly specialized or more of a generalist IT position. A well-drafted petition that details specific security engineering duties, required tools, and degree alignment addresses this directly. Employers who sponsor frequently know how to structure these petitions.
Can I find DevSecOps jobs that explicitly offer visa sponsorship?
Yes. Migrate Mate lists DevSecOps Engineer roles from employers with confirmed H-1B sponsorship history, so you're not guessing which postings are realistic. Many DevSecOps openings at cloud-native companies, defense technology firms, and large financial institutions include sponsorship as a standard hiring option given how difficult these roles are to fill domestically.
Do security clearance requirements disqualify visa holders from DevSecOps roles?
For roles requiring active U.S. security clearances (Secret, Top Secret, TS/SCI), visa holders are generally ineligible because clearances require U.S. citizenship or permanent residency. However, many DevSecOps positions at commercial companies, cloud providers, and non-defense contractors have no clearance requirement. Filter your search to clearance-optional roles to avoid wasted applications.
What is the prevailing wage requirement for sponsored Devsecops Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Devsecops Engineer employers are hiring and sponsoring visas right now.
Search Devsecops Engineer Jobs