Cloud Security Engineer - Hybrid, IAM & Encryption Expert

GuideWell; Northern (KY); Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Hybrid work model

Job summary

GuideWell, a Florida Blue affiliate, seeks a Cloud Security Engineer to build and operate security controls across multiple cloud platforms during migration. You will implement preventive controls like SCPs, IAM policies, and encryption, own privileged access and KMS architecture, and contribute to HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

This is a hands-on role within the cloud platform team, working with security to set control standards.

Qualifications

• 6+ years related work experience in information security, with 4+ years in cloud security engineering.
• Bachelor's degree required.
• Strong AWS/Azure IAM skills with cross-account access and federation.
• Hands-on Terraform experience.
• Experience with cloud-native security services in production.
• Experience in HIPAA/HITRUST/SOC 2/FedRAMP or NIST 800-53 environments.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets.
• Configure, tune, operate detective controls; drive remediation.
• Build data protection controls for PHI, including test data handling.
• Automate evidence collection and support audit cycles.
• Review application and vendor designs; respond to cloud security escalations.
• Build cloud logging pipeline feeding the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS architecture across accounts.

Skills

Cloud security

IAM

Terraform

Cloud platforms

HIPAA knowledge

Education

Bachelor's degree in Information Security or related

Tools

Terraform

KMS

Cloud-native security

Job description

GuideWell, a Florida Blue affiliate, seeks a Cloud Security Engineer to build and operate security controls across multiple cloud platforms during migration. You will implement preventive controls like SCPs, IAM policies, and encryption, own privileged access and KMS architecture, and contribute to HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

This is a hands-on role within the cloud platform team, working with security to set control standards.