Senior Cloud Security Engineer

Role Overview We are seeking an experienced Senior Cloud Security Engineer to lead the design, security, automation, and operational excellence of our cloud-native healthcare platform. This role combines Cloud Architecture, Platform Engineering, DevSecOps, Infrastructure as Code, Security Engineering, and Healthcare Compliance to build secure, scalable, and HIPAA-compliant systems on AWS. Key Responsibilities Cloud & Platform Architecture Design and manage scalable, secure AWS architectures. Build containerized and serverless platforms using EKS, ECS, Lambda, API Gateway, EventBridge, and Step Functions . Lead cloud migration and modernization initiatives. Build automated security policy enforcement and compliance controls. Establish infrastructure governance and drift detection processes. DevSecOps & Infrastructure Automation Build and maintain CI/CD pipelines using GitHub Actions . Implement Infrastructure as Code (Terraform, CloudFormation) . Automate infrastructure provisioning, deployments, testing, security, and compliance controls. Drive Security-as-Code and Compliance-as-Code practices. Security & Compliance Design and implement security controls using: IAM, KMS, Secrets Manager, Dependabot, CloudTrail, GuardDuty, Security Hub, WAF Manage and Secure Kubernetes RBAC, containers, APIs, databases, and cloud infrastructure. Lead HIPAA, HITRUST, SOC 2, and healthcare security compliance initiatives. Conduct threat modeling, risk assessments, vulnerability management, and incident response. Application & API Security Establish secure development practices for React, Node.js, Python, REST APIs, HL7 and FHIR APIs . Conduct architecture reviews and secure code assessments, Lead threat modeling activities. Implement OAuth2, OpenID Connect, RBAC, MFA, and Zero Trust principles. Integrate security testing into development and deployment workflows. AI & Healthcare Innovation Establish security architecture for AI-enabled healthcare workflows. Support secure adoption of Amazon Bedrock, RAG, AI Agents, and Healthcare AI solutions . Implement Data Privacy Controls, Prompt Security, Model Access Controls, AI Governance Frameworks. Ensure PHI is protected within AI and GenAI workflows. Required Skills AWS Architecture & Security Terraform & CloudFormation Kubernetes (EKS), ECS, Docker GitHub Actions & CI/CD React, Node.js, TypeScript, Python PostgreSQL, Aurora, DynamoDB Cloud Networking & Observability HIPAA, SOC 2, HITRUST FHIR, HL7, Healthcare Interoperability Amazon Bedrock, RAG, AI Security Qualifications Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related discipline. 8+ years in Cloud, Platform, DevSecOps, or Security Engineering. 5+ years designing and securing AWS production environments. Experience building healthcare platforms handling PHI. Proven expertise in Infrastructure as Code, Kubernetes, and DevSecOps. Experience implementing HIPAA and SOC 2 controls. Preferred Certifications AWS Solutions Architect Professional AWS Security Specialty CISSP, CCSP, HCISPP Certified Kubernetes Security Specialist (CKS) Certified Kubernetes Administrator (CKA)