Cloud & Identity Security Engineer II

Atlantic Health; Morristown (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

Atlantic Health is seeking a Cybersecurity Engineer II focused on Cloud Security and Identity to secure our cloud environments and the identities that access them. The role emphasizes AWS, with Azure/M365 support, CNAPP tooling like Wiz, and robust identity protection through Entra ID and hybrid AD.

The engineer will participate in incident response, vulnerability management, and data protection while aligning with HIPAA and regulatory requirements within a dynamic healthcare security program.

Qualifications

• Experience securing cloud environments (AWS, Azure).
• Experience with IAM and Entra ID administration.
• Experience with CNAPP tooling such as Wiz.
• Familiarity with HIPAA/regulatory requirements.
• On-call incident response experience.

Responsibilities

• Design, implement, and operate security controls across cloud environments (AWS primary, Azure/M365).
• Configure and optimize CNAPP tooling (Wiz) to surface findings for triage.
• Lead risk-based analysis and remediation of cloud findings with cross-team collaboration.
• Evaluate cloud configurations against CIS, AWS Well-Architected, and internal standards.
• Review and right-size AWS IAM roles and permissions; minimize privileged access.
• Manage Entra ID and hybrid AD identity services and MFA policies.
• Operate and support Entra PIM for privileged access and reviews.
• Monitor security alerts from Wiz, GuardDuty, Defender for Cloud, and SIEM.

Skills

Cloud security

AWS

Azure

Entra ID

PIM

IAM

Threat triage

Incident response

Vulnerability management

Container security

Tools

Wiz

GuardDuty

Security Hub

CloudTrail

Defender for Cloud

Terraform

CloudFormation

Kubernetes

Entra ID

PIM

Job description

Atlantic Health is seeking a Cybersecurity Engineer II focused on Cloud Security and Identity to secure our cloud environments and the identities that access them. The role emphasizes AWS, with Azure/M365 support, CNAPP tooling like Wiz, and robust identity protection through Entra ID and hybrid AD.

The engineer will participate in incident response, vulnerability management, and data protection while aligning with HIPAA and regulatory requirements within a dynamic healthcare security program.