Senior DevSecOps Engineer, Navista

Job Summary

At Navista, our mission is to empower community oncology practices to deliver patient-centered cancer care. Navista, a Cardinal Health company, is an oncology practice alliance co-created with oncologists and practice leaders that offers advanced support services and technology to help practices remain independent and thrive. True to our name, our experienced team is passionate about helping oncology practices navigate the future.

We are seeking a hands-on Senior DevOps Engineer to lead technical initiatives and support product development and integrations for Navista Application Services. In this role, you will design, implement, and operate robust CI/CD pipelines and multi‑cloud platforms that power Navista’s oncology applications. You will define and enforce DevSecOps and Site Reliability Engineering (SRE) standards and best practices, enabling secure, reliable, and fully automated delivery of Navista applications across multi‑cloud environments, including GCP, Azure, and on-prem data centers.

Responsibilities

• Design, build, and maintain CI/CD pipelines (Azure DevOps, Harness, GitHub, Concourse, Jenkins, etc.) to support automated builds, testing, and deployments for Navista applications, ensuring quality through effective branching strategies, build automation, artifact management, and release governance.
• Apply SRE principles by defining and maintaining SLIs/SLOs, implementing robust monitoring and alerting, and partnering with product and engineering teams to balance reliability, performance, and delivery velocity.
• Leads implementation of security controls within CI/CD pipelines, infrastructure-as-code, and deployment workflows to ensure compliance with HIPAA and HITECH requirements.
• Ensures applications and platforms adhere to security, privacy, and data protection standards across development, staging, and production environments.
• Implements automated controls for vulnerability scanning, secure credential and key management, and audit logging.
• Integrate security, compliance checks, and quality gates into CI/CD workflows, applying DevSecOps practices across the software delivery lifecycle.
• Implement and maintain infrastructure-as-code (e.g., Terraform) to provision and manage cloud and on‑prem environments consistently.
• Manage and optimize resources across multi‑cloud environments, including Kubernetes services, virtual machines, networking, storage, and related services in GCP, Azure, and data centers.
• Collaborate closely with application, QA, security, and cloud platform teams to support product development and ensure high availability, performance, and resilience.
• Troubleshoot and resolve build, deployment, performance, and environment issues, leading root cause analysis and driving long-term reliability improvements.
• Evaluate and adopt emerging DevOps, SRE, and DevSecOps tools and practices to enhance automation, observability, and developer experience.
• Document pipeline architectures, standards, and runbooks, contributing to a shared knowledge base for DevOps/SRE processes and tooling.
• Serve as a technical thought leader, collaborating with global, cross-functional teams and guiding and mentoring engineers to uphold best practices, architectural standards, and a collaborative, inclusive, growth-oriented team culture.

Qualifications

• 8-12 years of experience in technology domains such as software development, cloud computing, and systems engineering, with exposure to infrastructure, security, networking, and data & analytics, preferred
• Bachelor's degree in related field, or equivalent work experience, preferred
• 3+ years designing and operating CI/CD solutions in Azure DevOps; experience with build automation and source control (Git, GitHub), preferred
• 2+ years of experience with the Harness platform (feature flags, CI/CD, monitoring) or similar tooling, preferred
• Proven experience implementing CI/CD using tools such as Jenkins, GitHub Actions, Maven/Gradle, and configuration/automation tools (e.g., Ansible)
• Strong proficiency with infrastructure-as-code tools (e.g., Terraform) for Azure, GCP, and on‑prem infrastructure.
• Experience managing Kubernetes-based workloads and cloud services in GCP and/or Azure
• Demonstrated exposure to SRE pract