Senior DevSecOps Engineer

Start free →

Or apply yourself on the official page →

About the role

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary We are seeking an experienced Sr. DevSecOps Engineer to support a large-scale, GCP-native and Azure-connected enterprise environment. The engineer will perform hands on work  setting up CI/CD pipelines, GCP infrastructure provisioning, IAM and SSO management, DevSecOps compliance, observability, data integration, and production operations — collaborating daily with Security, EDP, Network, Data Governance, and application engineering teams across all GCP and Azure projects under the organization. Key Responsibilities GCP Infrastructure & GKE Provisioning • Provision and manage GCP projects, GKE namespaces and clusters, Cloud SQL, BigQuery, GCS, Cloud Composer, Dataproc, and Secret Manager • Configure Workload Identity Federation (WIF) and environment-specific resources across Dev, PDEV, QA, and Production • Validate environment readiness and coordinate PRIME and EDP provisioning requests • Manage infrastructure as code using Terraform; enforce IaC best practices across all environments IAM, Service Accounts, SSO & Access Management • Create and manage GCP service accounts, AD groups, WIF bindings, token-creator roles, Secret Manager, Cloud SQL, and BigQuery permissions • Configure Ping SAML/OIDC integrations including client IDs/secrets, redirect URLs, certificates, and environment-specific SSO settings • Validate AD-group restrictions and login flows; coordinate access requests with application and SSO teams • Manage fine-grained IAM permissions aligned with least-privilege and compliance requirements Infrastructure Troubleshooting & Production Readiness • Resolve issues across VPC Service Controls, Zscaler, VPN, firewall, DNS, signed URLs, Composer, Dataproc, Cloud SQL, Secret Manager, and GKE • Perform environment health checks, remove deployment blockers, and stabilize applications before go-live • Provide Tier 2/3 production support including incident triage, root cause analysis (RCA), and post-incident documentation • Coordinate with multiple teams across Network/VPC and Cloud teams to resolve infrastructure dependencies CI/CD, ArgoCD & Release Enablement • Build, maintain, and optimize GitHub Actions workflows for application and infrastructure delivery • Configure ArgoCD, environment variables, and secrets; implement WIF-based deployment patterns • Promote common artifacts across environments; troubleshoot pipeline and ArgoCD authentication failures • Coordinate PR approvals and production releases; enforce branching and deployment gate standards • Support platform/library release management and versioning aligned with Agile delivery cadences Observability, Monitoring & Cost Management • Develop Grafana and GCP-native dashboards; integrate Prometheus and infrastructure metrics • Configure monitoring scopes, define logging and alerting standards, and establish SLO requirements • Investigate missing telemetry and ensure full observability coverage across all environments • Enable BigQuery billing exports and project-level cost visibility; support cost optimization initiatives Data Integration, Governance & Secure File Transfer • Support BigQuery datasets, views, policy tags, encryption/decryption, fine-grained access, and data quality validation • Coordinate EDM ingestion/egress, APIs, SFTP/SFG/WebTransport, historical data loads, and secure GCP

View the official posting →