Senior DevOps & Security Engineer

Synapticure is the largest, most comprehensive specialty care and life sciences company in the country for those living with neurodegenerative diseases. Founded by patients and caregivers living with these diseases, we are redefining the care and the research paradigm for conditions like Alzheimer's, Parkinson's, and ALS in all 50 states.

Our business is powered by two connected engines.

The CARES Engine (Clinical Operations)

A scalable, 50-state virtualized clinical network providing timely access to expert neurologists and cutting edge treatments with wraparound care coordination and behavioral health support. Our team creates personalized care plans focused on education and empowerment, connecting patients with a multidisciplinary team of subspecialty neurologists, geriatricians, psychologists, and care coordinators who collaborate to deliver comprehensive care.

The CURES Engine (Research & Innovation)

Leveraging our deeply engaged, well characterized national patient cohort, CURES partners with life science, pharma, biotech, and medical device companies to accelerate the development of neurodegenerative treatments, spanning discovery stage lab services, clinical trial services, and real world evidence data and analytics.

Partnering with providers, health plans, and life sciences companies, including CMS' GUIDE dementia care model, Synapticure is dedicated to transforming the lives of millions of individuals and their families living with neurodegenerative diseases.

About the Role

The Senior DevOps & Security Engineer is a hands-on technical role responsible for building, operating, securing, automating, and improving our cloud infrastructure and software delivery environments. Reporting to the Director of IT, DevOps & Security, this role works across Engineering, Data, and other teams to maintain secure, reliable, and well-monitored systems.

The role focuses heavily on cloud security, compliance, vulnerability management, AWS, Terraform, Kubernetes, CI/CD, observability, and production reliability.

This is a strong fit for someone who enjoys working across cloud infrastructure, security engineering, compliance, and broader technical problem-solving.

The Day to Day

Translate security and compliance requirements into practical technical controls and directly support HIPAA, SOC 2, and related activities.
Build, maintain, secure, and improve AWS infrastructure, Kubernetes/EKS environments, identity and access controls (IAM), networking, databases, storage, logging, monitoring, and SIEM integrations.
Develop and maintain Terraform, secure CI/CD pipelines, deployment tooling, and related automation.
Manage vulnerability scanning, security telemetry, incident response support, and application/infrastructure hardening.
Partner with Engineering, Data, and other internal teams to automate workflows, connect systems, and reduce manual work.
Build scripts, integrations, internal tools, and API-based automations across technical and business systems.
Maintain clear technical documentation, architecture diagrams, and infrastructure security standards.
Research and evaluate new tools, security practices, and infrastructure approaches to determine how they can be applied effectively in our environment.
Participate in on-call or escalation coverage as operational needs evolve. Our production environment is generally stable and relatively low-traffic, so after-hours work tends to focus more on planned maintenance, upgrades, and proactive security improvements than on responding to outages.

Minimum Qualifications

• 4+ years of experience in cloud security engineering, DevOps, cloud infrastructure, SRE, or a related field.
• Strong understanding of cloud security, IAM, networking, vulnerability management, observability, and incident response.
• Hands-on experience supporting or implementing security controls in regulated environments (e.g., HIPAA, SOC 2).
• Hands-on experience with SentinelOne (or similar EDR/endpoint security platforms), AWS, Terraform, Kubernetes, and securing CI/CD pipelines.
• Ability to write scripts (Python, Bash, etc.) and work with APIs, integrations, and security automation.
• Excellent written and verbal communication skills, with a proven ability to produce clear technical writing, architecture documentation, and cross-functional collaboration.
• Ability to work independently, research unfamiliar problems, and take projects from problem definition through implementation.

Preferred Qualifications

Experience in healthcare, healthtech, financial services, or another highly regulated sector.
Familiarity with tools such as Datadog, SentinelOne, Argo CD, GitHub Actions, or Google Workspace administration.
Direct experience with SIEM setup, detection engineering, or penetration testing remediation.
Background in disaster recovery planning and backup restoration testing.

Compensation

Synapticure is an equal opportunity employer and a remote-first workplace. We believe that embedding equity, inclusion, compliance, and operational excellence across all aspects of our employee lifecycle directly reflects our core values. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Please apply even if you feel you do not meet all qualifications.

At this time, Synapticure is unable to provide work visa sponsorship.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [email protected].