Senior Cloud Security Engineer

The client is a growing healthcare technology company modernizing legacy systems, building new products, and automating administrative workflows while operating under HIPAA, HITRUST, and SOC 2 frameworks. The Senior Cloud Security Engineer will design, implement, and maintain security controls across a regulated AWS environment, protecting applications, infrastructure, and Protected Health Information while establishing cloud security guardrails, automation, detection capabilities, and secure-by-default standards. The role partners with application development, cloud operations, GRC, managed security providers, and engineering teams while serving as a technical leader and escalation point within Security Operations.

Responsibilities:

• Design, implement, and maintain security controls across a highly regulated AWS cloud environment
• Take a hands-on role in securing applications, infrastructure, and workloads containing Protected Health Information (PHI)
• Establish cloud security guardrails, automation, detection capabilities, and secure-by-default infrastructure standards
• Partner closely with application development, cloud operations, GRC, managed security providers, and other engineering teams
• Serve as a technical leader and escalation point within Security Operations

Requirements:

• 5–7+ years of experience in cybersecurity, infrastructure engineering, DevOps, or related areas
• 3+ years of hands-on AWS security engineering experience in compliance-driven environments
• Deep experience with AWS services including VPC, IAM, EC2, S3, RDS, Lambda, and EKS
• Experience designing secure multi-account AWS environments using AWS Organizations, organizational units, guardrails, IAM policies, and Service Control Policies
• Strong experience protecting sensitive data and PHI using encryption, AWS KMS, least-privilege access controls, and secure cloud architecture
• Production-level experience with Terraform and/or AWS CloudFormation
• Experience implementing policy-as-code using tools such as OPA, Checkov, or Rego
• Experience embedding security controls, vulnerability scanning, container scanning, and secrets management into CI/CD pipelines
• Strong understanding of HIPAA, HITRUST CSF, SOC 2, or similar compliance frameworks
• Experience with cloud security incident response, investigation, containment, and root cause analysis
• Hands-on experience with AWS CloudTrail, CloudWatch, SIEM platforms, and cloud detection engineering
• Experience with SAST, DAST, CSPM, vulnerability management, and remediation
• Strong Linux security and hardening experience, including access controls, logging, patching, and benchmark-based configuration
• Scripting and automation experience using Python/Boto3, PowerShell, or similar technologies
• AWS Certified Security – Specialty
• CISSP or CCSP certification
• HITRUST Certified CSF Practitioner (CCSFP)
• Experience with Windows, Microsoft 365, Entra ID, and Active Directory security
• Experience securing physical or hybrid infrastructure and networks
• Healthcare technology experience
• Familiarity with DICOM, PACS, HL7, or FHIR
• Experience integrating and securing environments following mergers, acquisitions, or platform integrations