Jr. Mid Level Security Engineer – Cloud & Infrastructure Security

The client is a growing healthcare technology company providing digital solutions to healthcare providers across the country. The Jr–Mid Level Security Engineer will protect sensitive healthcare information and build security into AWS cloud-native infrastructure using Terraform and Infrastructure-as-Code. The role focuses on DevSecOps, CI/CD security, identity and access management, cloud monitoring, vulnerability remediation, compliance controls, and incident response.

Responsibilities:

• This is a hands-on engineering position focused on protecting sensitive healthcare information and building security directly into cloud-native infrastructure
• This person will work extensively within AWS, using Terraform and Infrastructure-as-Code to build and maintain secure, repeatable, and auditable environments
• The role will work closely with Development and CloudOps teams around DevSecOps, CI/CD security, identity and access management, cloud monitoring, vulnerability remediation, and Infrastructure-as-Code scanning
• The Security Engineer will also help maintain cloud security controls aligned with HIPAA, NIST, HITRUST, SOC 2, and PCI requirements and support security monitoring and incident response within the AWS environment

Requirements:

• 3+ years of hands-on security engineering experience with a strong AWS focus
• Hands-on experience with Terraform and Infrastructure-as-Code
• Experience securing AWS workloads across compute, storage, networking, and identity
• Experience with AWS security services such as IAM, Organizations, CloudTrail, Config, GuardDuty, Security Hub, and KMS
• Experience with Microsoft Entra, Active Directory, and AWS IAM
• Understanding of CI/CD pipelines and DevSecOps practices
• Experience working with security frameworks and controls such as HIPAA, NIST, SOC 2, and HITRUST
• Strong understanding of Windows operating systems and networking concepts
• Experience with Azure and/or GCP
• Experience with cloud security posture management and Infrastructure-as-Code scanning tools
• Knowledge of modern cloud attack vectors and mitigating controls
• Experience with cryptography, key management, and authentication mechanisms
• Experience with policy-as-code and developing secure Terraform modules or cloud guardrails
• Experience working in healthcare or another highly regulated environment
• Security certifications such as CISSP, CISM, CSSLP, or AWS Certified Security – Specialty