Cloud Security Engineer (Hybrid) – HIPAA, FedRAMP & Terraform

Florida-Blue-; United States; Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Global Travel Health Insurance

Disability Insurance

Paid Time Off

Volunteer Time Off

Holidays

Job summary

Florida Blue is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms. The role focuses on preventive and detective controls, encryption, key management, and secure data handling for PHI, with strong hands-on work in Terraform and CI/CD.

You will join a security‑driven cloud platform team and partner with governance to meet HITRUST, HIPAA, SOC 2, and FedRAMP requirements in a hybrid work setup.

Qualifications

• 6+ years in information security with 4+ years in cloud security engineering.
• Bachelor's degree required.
• Strong AWS/Azure IAM skills including cross-account access and federation.
• Hands-on Terraform experience.
• Experience with cloud native security services in production.
• Experience in HIPAA/HITRUST/SOC 2/FedRAMP or NIST 800-53 environments.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets.
• Configure, tune, and operate detective controls; drive remediation.
• Build data protection controls for PHI and lower-environment test data handling.
• Automate evidence collection and support audit cycles.
• Review designs; respond to cloud security escalations.
• Build the cloud logging pipeline feeding the SOC.
• Deliver controls via Terraform and CI/CD.
• Produce evidence for HITRUST, HIPAA, SOC 2, FedRAMP and internal audits.
• Manage encryption and KMS architecture across accounts.

Skills

AWS IAM

Azure IAM

Terraform

Cloud security

Security automation

Education

Bachelor's degree

Tools

Cloud platforms

Job description

Florida Blue is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms. The role focuses on preventive and detective controls, encryption, key management, and secure data handling for PHI, with strong hands-on work in Terraform and CI/CD.

You will join a security‑driven cloud platform team and partner with governance to meet HITRUST, HIPAA, SOC 2, and FedRAMP requirements in a hybrid work setup.