--- title: 'DevSecOps / Cloud Engineer at Trial Library' canonical: 'https://feeny.ai/job/devsecops-cloud-engineer-trial-library-san-francisco-e7yr0w0ejs55' type: 'job' last_seen: '2026-09-10' --- # DevSecOps / Cloud Engineer at Trial Library - **Company:** Trial Library - **Location:** San Francisco, CA - **Compensation:** $168k–$205k - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-08-19 - **Last confirmed live:** 2026-09-10 - **Apply:** https://jobs.lever.co/triallibrary/a43aee5e-2085-42df-a0a2-d7c8d0d24062 ## Job description Trial Library is an AI-native research platform with a mission to improve healthcare outcomes by expanding access to precision medicine. ## About Trial Library Trial Library is an AI-native enrollment and care navigation platform that accelerates access to precision medicine. In collaboration with biopharmaceutical manufacturers, payers, and health systems, Trial Library enables the delivery of clinical trials as a standard care option - improving patient access, advancing oncology outcomes, and reducing the total cost of care. Backed by leading healthcare venture capital firms, Trial Library’s platform is currently deployed in 840+ clinics and 3,000+ providers nationwide. ## About the role Join our small, high-trust Infrastructure team as its second engineer, reporting to the Director of Infrastructure and partnering closely with our product engineering team. You will drive two key initiatives: building a cohesive AWS foundation with Terraform, Control Tower, and AFT, and owning end-to-end security engineering for our production PHI and Bedrock AI workloads. Just as important, you'll build the paved paths, self-service tooling, and guardrails that let our engineers ship quickly. AI is deeply embedded in how we work. We use it across coding, testing, and operations, not because of a mandate but because we've seen what it unlocks. We're looking for someone who already builds this way and is curious about what AI-augmented practice looks like in infrastructure and security work. We value fast decisions, open feedback, and empowered engineers. ## Your Responsibilities ## What you'll own - Infrastructure as code. The Terraform codebase - module design, state strategy, drift detection, plan review discipline - and the migration of our CloudFormation/Serverless footprint where it delivers real leverage, without stalling product delivery. - The AWS landing zone. Multi-account structure via Control Tower and AFT: account vending, customizations, service control policies, and OU design. - Security engineering. Security Hub, GuardDuty, Inspector, and Config as living detection tooling: triage findings, tune signals, and run the vulnerability lifecycle from discovery through verified fix. Coordinate penetration tests and own remediation. - Pipeline and supply chain security. Secure the commit-to-production path in GitHub Actions: least-privilege OIDC deployment roles, secrets scanning, SAST and dependency/container gates, branch protection, and artifact integrity. - Developer enablement. Paved-path tooling, self-service infrastructure, and secure defaults that let product engineers move fast without filing tickets. - Disaster recovery and backup. Backup strategy, RPO/RTO targets, Aurora point-in-time recovery, and regular DR testing to satisfy HIPAA contingency planning requirements. - Compliance as code. SOC 2 and HIPAA controls encoded into the platform - encryption, KMS, CloudTrail/Config coverage, log retention - with automated evidence collection. - Identity and access governance. IAM Identity Center, cross-account roles, SSO, periodic access reviews, and joiner/mover/leaver deprovisioning, alongside network foundations: VPC design, WAF, and Client VPN. Where you'll contribute Alongside the Director of Infrastructure and the Dev Team: - Security architecture for Bedrock AI workloads: access controls, guardrails, PHI data boundaries - Production incident response (reliability and security) and recurrence prevention - Observability and cost visibility: CloudWatch, alarms, dashboards, tagging - Partnership with application engineers on Lambda, Aurora PostgreSQL, and Bedrock workloads - Lightweight threat modeling and security review of new features and third-party integrations touching PHI, including sponsor/CRO data-handling requirements ## Your Requirements - 5+ years in DevSecOps, security, platform, or infrastructure engineering, operating production systems you were accountable for - Demonstrated security ownership: you have run vulnerability management, remediated real findings, and participated in incident response - not just deployed tooling - Deep Terraform proficiency: module hierarchies, multi-environment state, drift and refactors, critical plan review - Hands-on AFT and Control Tower experience - you have vended accounts through AFT and customized the pipeline, not adjacent familiarity - Broad AWS depth: IAM, Organizations, VPC, Lambda, RDS/Aurora, S3, KMS, CloudTrail, Config, Security Hub, GuardDuty, Secrets Manager - GitHub Actions as a daily environment, including pipeline hardening and secrets management - SOC 2 Type II and HIPAA experience in a real PHI-handling environment - you have owned controls, produced evidence, and sat in front of an auditor - Change and release discipline: you think about blast radius before you apply, have owned deployment and rollback strategies in production, and move quickly inside regulated-environment constraints rather than treating them as obstacles - Hands-on, autonomous, and clear: you write code daily, take ambiguous problems to documented decisions, and can explain security tradeoffs to non-security people - You use AI coding and automation tools as a daily part of how you work, and you actively explore how they change infrastructure and security practices - Genuine interest in improving clinical trial access and health equity ## Nice to Have - Compliance automation platforms (Drata, Vanta) including evidence automation - CloudFormation/CDK/Serverless-to-Terraform migration experience - GitHub EMU, SCIM, and SAML SSO administration - Aurora PostgreSQL operations and schema migration coordination - Python or TypeScript for automation - HITRUST, NIST 800-53, or CSA STAR exposure - Securing LLM workloads ## Why Trial Library Meaningful impact — helping patients access clinical trials faster through better technology and workflows High ownership environment — autonomy to build, test, and influence strategy across the business Collaborative team culture — low ego, high trust, and close partnership across functions Opportunity for growth — join at an early stage with meaningful exposure to company-building and decision-making Our Core Values Ally is our favorite moniker The broadest reach is worth the effort Celebrate measurable improvements in access and  outcomes Fearless advocates for representation in research Incentives matter to stakeholders choosing our products Taking initiative is actually giving We are accountable for the experience of patients and providers Empathy and humility are the real dynamic duo Our Benefits & Perks Health & Wellness: Comprehensive medical, dental, and vision coverage for employees and eligible dependents, along with disability, life, and supplemental insurance options designed to support your overall well-being. Time Off & Workplace Support: Flexible paid time off, observed company holidays, and a one-time home office stipend to help you create a productive and comfortable remote workspace within our hybrid environment. Financial & Lifestyle Benefits:401(k) program, pre-tax HSA and FSA options, commuter benefits, financial wellness resources, and access to legal protection plans to support both short- and long-term planning. Additional Support & Voluntary Benefits: Access to voluntary benefit offerings including pet wellness support, domestic partner coverage, and additional programs that support the diverse needs of our team members and their families. Our Interview Process Our interview process typically includes four stages, followed by reference checks and an offer. Depending on the role, particularly for technical or senior positions, the process may vary slightly and can include a technical assessment, case study, presentation, practical exercise, additional interview conversations, or conversations with members of our leadership team and investors. Trial Library, Inc. is an equal opportunity employer committed to building an inclusive workplace. We provide equal employment opportunities to all employees and applicants and prohibit discrimination and harassment of any kind without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital status, veteran status, military status, medical condition, family or medical leave status, political affiliation, or any other characteristic protected by applicable federal, state, or local law. Trial Library, Inc. is committed to providing reasonable accommodations for qualified individuals with disabilities throughout the recruiting process. If you require assistance or accommodation, please contact jobs@triallibrary.com ## About Trial Library ## Company Overview - **One-liner**: Trial Library is an AI-native platform that integrates clinical trials into routine care by activating providers, identifying eligible patients, and navigating them through the trial lifecycle across health systems, biopharma, and payers. - **Entity Type**: Private (Series A — $10M round closed in December 2025) - **Headquarters**: San Francisco, California, United States - **Founded**: 2022 - **Founders**: Not publicly available (CEO/leadership not explicitly named in search results; executive team includes Karim Damji, Chief Product Officer) ## Core Business - **Primary industry/industries**: Healthcare technology / Clinical research / Oncology - **Target customers**: B2B — health systems, biopharma companies, payers (health plans & employers), community oncology practices - **Mission or purpose statement**: "Improve healthcare outcomes by expanding access to precision medicine." [triallibrary.com/join-us](https://www.triallibrary.com/join-us) ## Products & Services - **[Health Provider Activation]**: Equips providers with intelligent pre‑screening, seamless referrals, and workflows that make research a natural part of patient care. - **[Internal Referral Optimization]**: Site augmentation analyzes existing patient populations to match them to open trials, increasing pre‑screening volume without adding outreach burden. - **[Intelligent Navigation OS]**: AI‑driven platform that proactively addresses barriers (transportation, food, language, scheduling) before they become dropout events, supporting patients through trial completion in one unified experience. - **[Conversational Trial Search]**: Lets medical affairs teams query open studies in plain language to surface protocols, eligibility details, and site information instantly. All offerings are delivered as a SaaS / platform service. [triallibrary.com](https://www.triallibrary.com/) ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: **Total Funding** — $15M (Seed $5M in August 2022 led by Lux Capital; Series A $10M in December 2025 led by NEXT VENTŪRES and SemperVirens Venture Capital) [linkedin.com/company/triallibrary](https://linkedin.com/company/triallibrary) - **Annual Revenue**: $1M (reported by third‑party data provider; not company‑confirmed) [linkedin.com/company/triallibrary](https://linkedin.com/company/triallibrary) - **Notable Investors/Partners**: Lux Capital, NEXT VENTŪRES, SemperVirens Venture Capital; partnered with Johnson & Johnson (expanded collaboration in 2024) and American Oncology Network (announced March 2025) [linkedin.com/company/triallibrary](https://linkedin.com/company/triallibrary) - **Growth Signals**: - Headcount grew 115.8% YoY to 29 employees. - 3,000+ providers onboarded across 840+ clinics. - Active job postings increased 50% month‑over‑month. - Multiple press releases and a patent (2024) for clinical trial matching. ## Competitive Advantages - **Single, coordinated ecosystem**: Aligns incentives across patients, providers, payers, and life science partners — a “one platform” approach rather than point solutions. - **AI‑native navigation OS**: Proactively addresses social determinants of health (transportation, food, language) to reduce dropout rates. - **Conversational search for medical affairs**: Lowers friction for finding and enrolling in trials using natural language queries. - **Partner network of 3,000+ providers** covering health systems, clinics, academic centers, and specialty practices. ## Strategic Focus - **Expand network depth**: Continue onboarding clinics and health systems to build “one of the country’s most dynamic research networks.” - **Deepen payer/employer integration**: Offer clinical trial access as a member benefit, differentiating health plans. - **Scale AI capabilities**: Improve pre‑screening, patient navigation, and dropout prevention through machine learning and natural language processing. - **Oncology leadership**: Focus on oncology first, with potential to expand into other therapeutic areas. ## Why Work Here - **Culture**: Described as “fearless advocates for representation in research” with values centered on measurable improvements, accountability, and patient‑provider experience. [triallibrary.com/join-us](https://www.triallibrary.com/join-us) - **Work style**: Hybrid — San Francisco HQ. Job postings explicitly list “Hybrid — Full-time San Francisco, CA.” - **Benefits**: Competitive salary & equity, medical/dental/vision coverage, paid vacation and parental leave, career development support. - **Engineering culture**: The tech stack and engineering team are growing (hiring a Staff Engineer, Backend & Data); the product is AI‑forward. - **Growth trajectory**: Rapid headcount growth (115% YoY) and recent Series A funding signal strong momentum and room for impact. ## Sources 1. [triallibrary.com](https://www.triallibrary.com/) 2. [triallibrary.com/about](https://www.triallibrary.com/about) 3. [triallibrary.com/join-us](https://www.triallibrary.com/join-us) 4. [jobs.lever.co/triallibrary](https://jobs.lever.co/triallibrary) 5. [linkedin.com/company/triallibrary](https://linkedin.com/company/triallibrary) ## Other roles at Trial Library - [Account Executive, Oncology](https://feeny.ai/job/account-executive-oncology-trial-library-san-francisco-rf85g7a1n30z) — San Francisco, CA - [Staff Data Engineer](https://feeny.ai/job/staff-data-engineer-trial-library-san-francisco-zj048pa23p27) — San Francisco, CA - [Provider Network Partnerships Lead](https://feeny.ai/job/provider-network-partnerships-lead-trial-library-san-francisco-ev690ngpwjf2) — San Francisco, CA - [Patient Navigator](https://feeny.ai/job/patient-navigator-trial-library-san-francisco-2v67svt1mfxs) — San Francisco, CA - [Chief Commercial Officer](https://feeny.ai/job/chief-commercial-officer-trial-library-san-francisco-nqx8bhbsx0b2) — San Francisco, CA - [Strategic Finance & Operations Lead](https://feeny.ai/job/strategic-finance-operations-lead-trial-library-san-francisco-ee7qffjhpqs5) — San Francisco, CA