Cloud Security Engineer

Florida Blue Group; Northern (KY); Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Medical/dental/vision insurance

Retirement plan with employer match

Paid time off

Wellness program

Job summary

Florida Blue seeks a Cloud Security Engineer to build and operate security controls for GuideWell’s cloud platforms across commercial, GovCloud and secondary clouds. You will own encryption, key management, secrets, and privileged access, while delivering PHI protection and security evidence for HITRUST, HIPAA, SOC 2, and FedRAMP.

This hands‑on role collaborates with the cloud platform and security teams, provides automated evidence, and contributes to a robust cloud security posture with

Qualifications

• 6+ years of information security experience with 4+ years in cloud security.
• Bachelor’s degree required.
• Strong AWS/Azure IAM skills including cross‑account access and federation.
• Hands‑on Terraform experience.
• Experience with cloud native security services in production.
• Experience in environments governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800‑53.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets.
• Configure, tune, and operate detective controls; drive findings to remediation.
• Build data protection controls for PHI, including lower‑environment test data handling.
• Automate evidence collection and support audit and assessment cycles.
• Review application and vendor designs; respond to cloud security escalations.
• Build the cloud logging pipeline that feeds the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS key architecture across accounts.

Skills

Cloud security engineering

IAM (AWS/Azure)

Terraform

HIPAA compliance

Security operations

Education

Bachelor's degree

Tools

SIEM tooling

Job description

The Cloud Security Engineer builds and operates the security controls embedded in GuideWell's cloud platforms as the company migrates infrastructure across commercial, GovCloud, and secondary cloud platforms. This role delivers preventive controls such as service control policies, IAM roles, and permission boundaries, and owns privileged access, key encryption architecture, secrets management, and the tuning of cloud security configuration services. The engineer builds the cloud logging pipeline feeding the security operations center, implements PHI data protection, and produces control evidence for HITRUST, HIPAA, SOC 2, and FedRAMP. This is a hands‑on engineering role on the cloud platform team, working closely with the security organization that sets control standards.

What You Will Be Doing

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Configure, tune, and operate detective controls; drive findings to remediation
• Build data protection controls for PHI, including lower‑environment test data handling
• Automate evidence collection and support audit and assessment cycles
• Review application and vendor designs; respond to cloud security escalations
• Build the cloud logging pipeline that feeds the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS key architecture across accounts.

What We Require

• 6+ years related work experience in relevant information security, with 4+ years in cloud security engineering
• Related Bachelor's degree required
• Strong AWS/Azure IAM skills, including cross-account access and federation.
• Hands‑on Terraform.
• Experience with cloud native security services in production.
• Experience in an environment governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800‑53.

What We Prefer

• Healthcare payer experience. AWS/Azure Security Specialty, CCSP, or GIAC cloud security certification.
• GovCloud and FedRAMP Moderate or High. Security engineering across two or more major cloud platforms.
• SIEM integration and detection engineering. Privileged access management tooling.

General Physical Demands

• Exerting up to 10 pounds of force occasionally to move objects.
• Jobs are sedentary if traversing activities are required only occasionally.
• This position offers a hybrid work arrangement which combines flexibility with in office engagement. Team schedules are determined based on role requirements and business needs. Travel to and from our corporate offices may be required.

What We Offer

As a Florida Blue employee, you will be at the heart of GuideWell’s vision – to lead the nation in transforming health through compassionate, connected, and technology‑enabled care that delivers personalized value and empowered living.

To support your wellbeing, comprehensive benefits are offered. As an employee, you will have access to:

• Medical, dental, vision, life and global travel health insurance
• Income protection benefits: life insurance, short‑and‑long‑term disability programs
• Leave programs to support personal circumstances
• Retirement Savings Plan including employer match
• Paid time off, volunteer time off, 10 holidays and 2 well‑being days
• Additional voluntary benefits available; and a comprehensive wellness program

Employee benefits are designed to align with federal and state employment laws. Benefits may vary based on the state in which work is performed. Benefits for intern, part‑time and seasonal employees may differ.

To support your financial wellbeing, we offer competitive pay as well as opportunities for incentive or commission compensation. We also conduct regular annual reviews with pay for performance considerations for base pay increases.

Typical Annualized Offer/Hiring Range:

$109,300 - $136,600

Annualized Salary Range: $109,300 - $177,600

Final pay will be determined with consideration of market competitiveness, internal equity, and the job‑related knowledge, skills, training, and experience you bring.

We are an Equal Employment Opportunity employer committed to cultivating a work experience where everyone feels like they belong and can perform at their best in pursuit of our mission. All qualified applicants will receive consideration for employment.