Staff DevSecOps Specialist

<h2><strong>About AlayaCare </strong></h2> <p>At AlayaCare, we’re more than just a fast-growing SaaS company, we’re a team of people passionate about transforming home healthcare. Our cloud-based platform empowers care providers around the world to deliver better outcomes for their clients. </p> <p>With 550+ employees across Canada, the US, Australia, and Brazil, we’re united by a shared mission and a strong culture of transparency, growth, and human connection. Whether you're early in your career or a seasoned expert, AlayaCare offers the opportunity to grow your impact, your skills, and your career.</p> <h2><strong>About the Role</strong></h2> <p>We are seeking a Staff DevSecOps Specialist to join our Security team. Reporting to the Director, Information Security and Privacy, The Staff DevSecOps Specialist is a senior individual-contributor role driving the technical direction of AlayaCare’s security vaning practice. It is a builder's role at the level where the thing being built is not only tooling but the technical standards and architecture other engineers design against, from our cloud and platform controls to the review practices those designs pass through and the automation that lets a small team protect a large surface. </p> <p><span data-contrast="auto"><span data-ccp-parastyle="Normal (Web)">As a member of AlayaCare's Information Security & Privacy team, you will drive the technical direction of how security is engineered across Site Reliability Engineering, Developer Experience, and platform teams, and carry it through in code. You will own the architecture and operation of our edge security on Cloudflare, lead the Wiz cloud security program across our AWS and Kubernetes estate, define how security is enforced in CI/CD alongside DevX, build the security tooling and detections the rest of the organization runs on, and secure the agents and agentic pipelines our developers are shipping. </span></span></p> <p><span data-contrast="auto"><span data-ccp-parastyle="Normal (Web)">You will lead through design, code, and influence rather than through reporting lines: the technical direction you shape is the direction you build. It is a rare scope for an individual contributor, spanning healthcare data, SOC 2, HIPAA, and Canadian privacy obligations across a platform where one engineer's work is visible everywhere. </span></span></p> <h2><strong>What You’ll Do</strong></h2> <ul> <li>Contribute to defining the multi-year technical roadmap for security engineering at AlayaCare, and personally build its most difficult components: the security tooling, services, and automation the organization depends on, and the engineering standards and review practices for security-owned code. </li> <li data-leveltext="·" data-font="Symbol" data-listid="22" data-list-defn-props="{"335552541":1,"335559685":1080,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"·","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-ccp-parastyle="Normal (Web)"><span data-contrast="auto">Own the architecture and operation of Cloudflare edge security: WAF rule strategy, custom rules, rate limiting, bot management, and DDoS posture, tuned against real production traffic with SRE and product teams. </span></span></li> <li data-leveltext="·" data-font="Symbol" data-listid="22" data-list-defn-props="{"335552541":1,"335559685":1080,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"·","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-ccp-parastyle="Normal (Web)">&l