Note: The job is a remote job and is open to candidates in USA. The client is a growing healthcare technology company modernizing legacy systems, building new products, and automating administrative workflows while operating under HIPAA, HITRUST, and SOC 2 frameworks. The Senior Cloud Security Engineer will design, implement, and maintain security controls across a regulated AWS environment, protecting applications, infrastructure, and Protected Health Information while establishing cloud security guardrails, automation, detection capabilities, and secure-by-default standards. The role partners with application development, cloud operations, GRC, managed security providers, and engineering teams while serving as a technical leader and escalation point within Security Operations.
Responsibilities
- Design, implement, and maintain security controls across a highly regulated AWS cloud environment
- Take a hands-on role in securing applications, infrastructure, and workloads containing Protected Health Information (PHI)
- Establish cloud security guardrails, automation, detection capabilities, and secure-by-default infrastructure standards
- Partner closely with application development, cloud operations, GRC, managed security providers, and other engineering teams
- Serve as a technical leader and escalation point within Security Operations
Skills
- 5–7+ years of experience in cybersecurity, infrastructure engineering, DevOps, or related areas
- 3+ years of hands-on AWS security engineering experience in compliance-driven environments
- Deep experience with AWS services including VPC, IAM, EC2, S3, RDS, Lambda, and EKS
- Experience designing secure multi-account AWS environments using AWS Organizations, organizational units, guardrails, IAM policies, and Service Control Policies
- Strong experience protecting sensitive data and PHI using encryption, AWS KMS, least-privilege access controls, and secure cloud architecture
- Production-level experience with Terraform and/or AWS CloudFormation
- Experience implementing policy-as-code using tools such as OPA, Checkov, or Rego
- Experience embedding security controls, vulnerability scanning, container scanning, and secrets management into CI/CD pipelines
- Strong understanding of HIPAA, HITRUST CSF, SOC 2, or similar compliance frameworks
- Experience with cloud security incident response, investigation, containment, and root cause analysis
- Hands-on experience with AWS CloudTrail, CloudWatch, SIEM platforms, and cloud detection engineering
- Experience with SAST, DAST, CSPM, vulnerability management, and remediation
- Strong Linux security and hardening experience, including access controls, logging, patching, and benchmark-based configuration
- Scripting and automation experience using Python/Boto3, PowerShell, or similar technologies
- AWS Certified Security – Specialty
- CISSP or CCSP certification
- HITRUST Certified CSF Practitioner (CCSFP)
- Experience with Windows, Microsoft 365, Entra ID, and Active Directory security
- Experience securing physical or hybrid infrastructure and networks
- Healthcare technology experience
- Familiarity with DICOM, PACS, HL7, or FHIR
- Experience integrating and securing environments following mergers, acquisitions, or platform integrations
Benefits
- Remote
Company Overview
Company H1B Sponsorship