Cloud Security Engineer

GuideWell is a healthcare organization focused on technology-enabled care and health transformation. The Cloud Security Engineer builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms, including IAM, encryption, secrets management, logging, and data protection. The role also automates control evidence collection, supports audits, and responds to cloud security risks and escalations.

Responsibilities:

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Configure, tune, and operate detective controls; drive findings to remediation
• Build data protection controls for PHI, including lower-environment test data handling
• Automate evidence collection and support audit and assessment cycles
• Review application and vendor designs; respond to cloud security escalations
• Build the cloud logging pipeline that feeds the security operations center
• Deliver controls through Terraform and CI/CD
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit
• Manage encryption and KMS key architecture across accounts

Requirements:

• • 6+ years related work experience in relevant information security, with 4+ years in cloud security engineering
• • Related Bachelor's degree required
• • Strong AWS/Azure IAM skills, including cross-account access and federation
• • Hands-on Terraform
• • Experience with cloud native security services in production
• • Experience in an environment governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53
• • Exerting up to 10 pounds of force occasionally to move objects
• • Jobs are sedentary if traversing activities are required only occasionally
• This position offers a hybrid work arrangement which combines flexibility with in office engagement. Team schedules are determined based on role requirements and business needs. Travel to and from our corporate offices may be required
• • Healthcare payer experience
• AWS/Azure Security Specialty, CCSP, or GIAC cloud security certification
• • GovCloud and FedRAMP Moderate or High
• Security engineering across two or more major cloud platforms
• • SIEM integration and detection engineering
• Privileged access management tooling