Azure Cloud Security Engineer - Healthcare & HIPAA

SCAN Group; Long Beach (CA); On-site; USD 106,000 - 183,000; Full time

Benefits offered by this job

Annual bonus program

Wellness program

PTO and holidays

401(k) with employer match

Tuition reimbursement

Job summary

SCAN Group is seeking a skilled Cloud/App Security Engineer to design, deploy, and secure our Azure-based cloud infrastructure with HIPAA/HITRUST compliance, high availability, and data security for patient-facing applications.

The role emphasizes Azure resources, IAM/Zero Trust, IaC (ARM/Terraform/Bicep), CI/CD with Azure DevOps, and secure APIs, plus monitoring, vulnerability testing, and cross‑functional collaboration in a healthcare setting.

Qualifications

• Experience in cloud/app security with 3+ years on Microsoft Azure.
• Knowledge of OWASP and secure coding practices.
• Design and implement security solutions for Azure cloud infrastructure in healthcare apps.

Responsibilities

• Design, implement, and test security controls for cloud apps and integrations.
• Manage IaC with ARM/Terraform/Bicep in CI/CD pipelines.
• Secure Azure resources (VMs, App Services, SQL, Entra ID, Storage, AKS, VNets).
• Implement IAM, RBAC, and least-privilege roles; advance Zero Trust.
• Automate security deployments using CI/CD tools and PowerShell.
• Monitor performance and security posture using Azure Monitor and Log Analytics.

Skills

Cloud security

Azure

DevOps

IaC

Zero Trust

SAST/DAST

Python

IAM/RBAC

Monitoring

Documentation

Education

Bachelor's degree in Computer Science or equivalent

Tools

Azure DevOps

Terraform

Bicep

ARM templates

PowerShell

GitHub

Job description

SCAN Group is seeking a skilled Cloud/App Security Engineer to design, deploy, and secure our Azure-based cloud infrastructure with HIPAA/HITRUST compliance, high availability, and data security for patient-facing applications.

The role emphasizes Azure resources, IAM/Zero Trust, IaC (ARM/Terraform/Bicep), CI/CD with Azure DevOps, and secure APIs, plus monitoring, vulnerability testing, and cross‑functional collaboration in a healthcare setting.