Sr. Cloud Security Engineer (Remote)

Inspira Financial is dedicated to enabling better health and greater wealth for businesses and individuals. The Sr. Cloud Security Engineer will be responsible for hands-on remediation of cloud vulnerabilities, ensuring compliance with policies, and collaborating with various teams to maintain security standards.

Responsibilities:

• Perform hands-on remediation of infrastructure and cloud vulnerabilities, driving issues to closure within established SLAs and policy requirements
• Operate and administer vulnerability management and cloud security posture management (CSPM/DSPM) tooling - managing scan coverage, remediating findings, and reporting on SLA adherence
• Identify, prioritize, and remediate cloud misconfigurations and security posture gaps across the organization's Azure subscriptions and infrastructure
• Implement and validate security controls across cloud-native services, IaaS, PaaS, and container-based workloads
• Maintain and enforce secure configurations across firewalls, network security components, application delivery infrastructure, and compute platforms in partnership with the Security Team
• When needed, assist with privileged credential hygiene, certificate lifecycle, and secrets governance across the environment
• Support the hardening of Windows and Linux server environments through configuration management and compliance-as-code practices
• Maintain awareness of known and emerging vulnerabilities across the full technology stack - cloud services, OS platforms, network components, and application runtimes
• Monitor and report the organization's compliance posture against established security policies, baselines, and regulatory frameworks
• Partner with the Security team to define, author, and maintain cloud and infrastructure security policies - keeping pace with evolving industry trends and regulatory requirements
• Review and update existing policies on a regular cadence to reflect changes in the cloud environment and threat landscape
• Produce accurate, timely compliance posture reports for leadership - covering baseline adherence, vulnerability SLA performance, and remediation progress
• Coordinate and assist in evidence collection and audit maintenance for internal and external organizational assessments, including regulatory audits and third-party risk reviews
• Respond to findings from audits, security questionnaires, and internal/external scanning or penetration testing
• Partner with Software Engineering and App Security teams to embed security into CI/CD pipelines and deployment workflows - including secret scanning, least-privilege deployment identities, and secrets management integration
• Review and advise on Infrastructure-as-Code (IaC) implementations from a security perspective, ensuring patterns align with security baselines and organizational standards
• Support secure configuration management across server and cloud environments
• Ensure PKI and certificate management practices are maintained across the environment - including TLS/SSL lifecycle, renewal processes, and certificate inventory
• Serve as an informal technical leader and security subject matter expert across Cloud Engineering, Platform Engineering, and adjacent teams
• Mentor engineers on security best practices, secure design patterns, and compliance requirements - elevating security competency across the department without direct people management responsibilities
• Contribute to architecture and design reviews, providing a security lens on cloud platform decisions in partnership with the Cloud Architect
• Cloud Engineering & Platform Engineering - consult on secure architecture, container platform hardening, network segmentation, and pipeline security practices
• Identity & Access Management (IAM) - partner on identity governance, privileged access management, and access control policy enforcement
• Incident Response / Vulnerability Management - collaborate with the Security Detection & Response team on vulnerability prioritization, SLA tracking, remediation coordination, and incident response activities
• Audits & Assessments - provide technical support for evidence gathering, compliance posture reporting, and audit response
• Application Development Teams - consult on security requirements for cloud-native application platforms, ensuring developer environments are built securely from the ground up

Requirements:

• Perform hands-on remediation of infrastructure and cloud vulnerabilities, driving issues to closure within established SLAs and policy requirements
• Operate and administer vulnerability management and cloud security posture management (CSPM/DSPM) tooling - managing scan coverage, remediating findings, and reporting on SLA adherence
• Identify, prioritize, and remediate cloud misconfigurations and security posture gaps across the organization's Azure subscriptions and infrastructure
• Implement and validate security controls across cloud-native services, IaaS, PaaS, and container-based workloads
• Maintain and enforce secure configurations across firewalls, network security components, application delivery infrastructure, and compute platforms in partnership with the Security Team
• When needed, assist with privileged credential hygiene, certificate lifecycle, and secrets governance across the environment
• Support the hardening of Windows and Linux server environments through configuration management and compliance-as-code practices
• Maintain awareness of known and emerging vulnerabilities across the full technology stack - cloud services, OS platforms, network components, and application runtimes
• Monitor and report the organization's compliance posture against established security policies, baselines, and regulatory frameworks
• Partner with the Security team to define, author, and maintain cloud and infrastructure security policies - keeping pace with evolving industry trends and regulatory requirements
• Review and update existing policies on a regular cadence to reflect changes in the cloud environment and threat landscape
• Produce accurate, timely compliance posture reports for leadership - covering baseline adherence, vulnerability SLA performance, and remediation progress
• Coordinate and assist in evidence collection and audit maintenance for internal and external organizational assessments, including regulatory audits and third-party risk reviews
• Respond to findings from audits, security questionnaires, and internal/external scanning or penetration testing
• Partner with Software Engineering and App Security teams to embed security into CI/CD pipelines and deployment workflows - including secret scanning, least-privilege deployment identities, and secrets management integration
• Review and advise on Infrastructure-as-Code (IaC) implementations from a security perspective, ensuring patterns align with security baselines and organizational standards
• Support secure configuration management across server and cloud environments
• Ensure PKI and certificate management practices are maintained across the environment - including TLS/SSL lifecycle, renewal processes, and certificate inventory
• Serve as an informal technical leader and security subject matter expert across Cloud Engineering, Platform Engineering, and adjacent teams
• Mentor engineers on security best practices, secure design patterns, and compliance requirements - elevating security competency across the department without direct people management responsibilities
• Contribute to architecture and design reviews, providing a security lens on cloud platform decisions in partnership with the Cloud Architect
• Cloud Engineering & Platform Engineering - consult on secure architecture, container platform hardening, network segmentation, and pipeline security practices
• Identity & Access Management (IAM) - partner on identity governance, privileged access management, and access control policy enforcement
• Incident Response / Vulnerability Management - collaborate with the Security Detection & Response team on vulnerability prioritization, SLA tracking, remediation coordination, and incident response activities
• Audits & Assessments - provide technical support for evidence gathering, compliance posture reporting, and audit response
• Application Development Teams - consult on security requirements for cloud-native application platforms, ensuring developer environments are built securely from the ground up
• As part of the evaluation process, candidates who progress beyond the initial screening will be required to complete a formal technical assessment to validate coding proficiency and technical competency
• 10+ years of experience in cloud engineering, infrastructure, or security engineering - with demonstrated hands-on security work, not just advisory
• Bachelor's Degree in Computer Science, Software/Computing Engineering, Information Security, or related field - or equivalent experience
• Technical certifications preferred: AZ-500, SC-100, SC-200, AZ-104, or equivalent cloud/security certifications
• Experience working in regulated industries (Financial Services, Insurance, or Health-Tech preferred)
• Familiarity with compliance frameworks: NIST, HIPAA, PCI and Minimum Security Baselines (MSBs)
• Familiarity with PCI-DSS scoped environment security requirements preferred
• Experience operating in regulated industries (Financial Services, Insurance, or Health-Tech)