Role Overview
We are seeking an experienced Senior Cloud Security Engineer to lead the design, security, automation, and operational excellence of our cloud-native healthcare platform.
This role combines Cloud Architecture, Platform Engineering, DevSecOps, Infrastructure as Code, Security Engineering, and Healthcare Compliance to build secure, scalable, and HIPAA-compliant systems on AWS.
Key Responsibilities
Cloud & Platform Architecture
- Design and manage scalable, secure AWS architectures.
- Build containerized and serverless platforms using EKS, ECS, Lambda, API Gateway, EventBridge, and Step Functions.
- Lead cloud migration and modernization initiatives.
- Build automated security policy enforcement and compliance controls.
- Establish infrastructure governance and drift detection processes.
DevSecOps & Infrastructure Automation
- Build and maintain CI/CD pipelines using GitHub Actions.
- Implement Infrastructure as Code (Terraform, CloudFormation).
- Automate infrastructure provisioning, deployments, testing, security, and compliance controls.
- Drive Security-as-Code and Compliance-as-Code practices.
Security & Compliance
- Design and implement security controls using: IAM, KMS, Secrets Manager, Dependabot, CloudTrail, GuardDuty, Security Hub, WAF
- Manage and Secure Kubernetes RBAC, containers, APIs, databases, and cloud infrastructure.
- Lead HIPAA, HITRUST, SOC 2, and healthcare security compliance initiatives.
- Conduct threat modeling, risk assessments, vulnerability management, and incident response.
Application & API Security
- Establish secure development practices for React, Node.js, Python, REST APIs, HL7 and FHIR APIs.
- Conduct architecture reviews and secure code assessments,
- Lead threat modeling activities.
- Implement OAuth2, OpenID Connect, RBAC, MFA, and Zero Trust principles.
- Integrate security testing into development and deployment workflows.
AI & Healthcare Innovation
- Establish security architecture for AI-enabled healthcare workflows.
- Support secure adoption of Amazon Bedrock, RAG, AI Agents, and Healthcare AI solutions.
- Implement Data Privacy Controls, Prompt Security, Model Access Controls, AI Governance Frameworks.
- Ensure PHI is protected within AI and GenAI workflows.
Required Skills
- AWS Architecture & Security
- Terraform & CloudFormation
- Kubernetes (EKS), ECS, Docker
- GitHub Actions & CI/CD
- React, Node.js, TypeScript, Python
- PostgreSQL, Aurora, DynamoDB
- Cloud Networking & Observability
- HIPAA, SOC 2, HITRUST
- FHIR, HL7, Healthcare Interoperability
- Amazon Bedrock, RAG, AI Security
Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related discipline.
- 8+ years in Cloud, Platform, DevSecOps, or Security Engineering.
- 5+ years designing and securing AWS production environments.
- Experience building healthcare platforms handling PHI.
- Proven expertise in Infrastructure as Code, Kubernetes, and DevSecOps.
- Experience implementing HIPAA and SOC 2 controls.
Preferred Certifications
- AWS Solutions Architect Professional
- AWS Security Specialty
- CISSP, CCSP, HCISPP
- Certified Kubernetes Security Specialist (CKS)
- Certified Kubernetes Administrator (CKA)
