Role Description The DevSecOps Engineer plays a critical role in enabling secure, scalable software delivery across Allia Health Group’s cloud infrastructure. This role operates at the intersection of DevOps and security, embedding security controls directly into CI/CD pipelines and engineering workflows. This is a mission-critical hire supporting the organization’s SOC 2 compliance timeline. The ideal candidate brings a balanced skill set across infrastructure, automation, and security tooling, and is comfortable working in a fast-paced, evolving environment. - Operate as a bridge between DevOps and Security to integrate security into the software development lifecycle - Implement CI/CD security controls including SAST, DAST, SCA, and container scanning - Implement controls aligned with SOC 2 change management and vulnerability management requirements - Manage secrets lifecycle using cloud-native tools - Build and maintain infrastructure security controls using Terraform - Generate audit-ready change management evidence - Integrate vulnerability scanning into compliance workflows - Enforce secure development practices and pipeline protections - Collaborate with GRC teams to align technical controls with compliance requirements Qualifications - Minimum 3+ years of experience in DevOps, DevSecOps, or platform engineering - Experience with cloud platforms such as Google Cloud Platform (GCP) - Strong experience with CI/CD tools such as GitHub Actions - Hands-on experience with Terraform and infrastructure as code - Knowledge of application security and container security tools - Familiarity with SOC 2 or similar compliance frameworks Requirements - Experience with compliance platforms such as Drata or similar tools - Knowledge of HIPAA technical safeguards - Experience with policy-as-code tools - Relevant cloud or security certifications Benefits - Full benefits package including medical, vision, dental, 401(k) with company match, PTO, Flex days, holidays, and more - Working in Madeira in a shared office space, remote in Portugal, or remote in a Portuguese time zone-friendly location - Opportunity to build security-first infrastructure and systems - High-impact role within a growing technology organization - Benefits package designed to meet local market standards and legal requirements

• Co-responsibility for system availability: You actively contribute to the availability, reliability, and efficiency of our complex system architecture, which consists of around 70 servers hosted at Hetzner. • Maintenance and automation: You support the maintenance and automation of our existing infrastructure based on technologies such as Ubuntu, Percona MySQL Cluster, MinIO, Elasticsearch, Redis, NGINX, HAProxy, TiDB, ClickHouse and Kubernetes. • Monitoring and analysis: You improve our monitoring strategies and perform comprehensive incident and fault analyses. • High availability: You are prepared, in exceptional cases, to be available outside normal hours, including at night, to ensure our systems run smoothly. • Software development: Several years of experience in one or more programming languages (e.g., Rust, Java, Go, TypeScript) are required.

• Administrar y mantener la infraestructura de la empresa en Google Cloud Platform (GCP). • Implementar y mantener soluciones de infraestructura como código con Terraform y Terragrunt. • Gestionar la estructura de proyectos, carpetas, VPCs, IAM y recursos en GCP. • Crear y mantener contenedores con Docker, charts de Helm y orquestación con Kubernetes (GKE). • Gestionar artefactos en GCP Artifact Registry. • Administrar esquemas y migraciones de bases de datos con Atlas. • Gestionar el versionado del código con Gitlab y Git. • Implementar y mantener procesos de CI/CD utilizando Gitlab CI/CD. • Monitorizar y optimizar la infraestructura con Cloud Monitoring, Cloud Logging y Cloud Trace. • Colaborar estrechamente con el equipo de desarrollo para la implementación y despliegue de aplicaciones.

• Ensure the reliability, stability, performance and cost-efficiency of Raiô's platforms, working closely with engineering and product teams. • Define, monitor and evolve reliability and performance indicators (SLIs/SLOs), establishing effective alerts and continuous improvement routines. • Manage production incidents, conducting root cause analysis and implementing corrective and preventive plans, with a focus on learning and system evolution. • Design, deploy and evolve observability practices (logs, metrics and tracing), improving predictability and reducing time to resolution for failures. • Develop and maintain automations and infrastructure as code, ensuring consistent, secure and reproducible environments. • Structure and evolve operational practices: routines, playbooks/runbooks, change management, metrics review and capacity planning. • Lead, together with engineering teams, technical and architectural decisions aimed at resilience, scalability and cost optimization. • Drive continuous improvements in operational processes, security, availability and cost control in cloud environments. • Promote best practices in reliability, operations and engineering, raising the overall technical level of the team.