Cloud Security Engineer — Hybrid, Terraform & HIPAA Ready

GuideWell; Northern (KY); Hybrid; USD 109,000 - 178,000; Full time

Job summary

GuideWell seeks a Cloud Security Engineer to build and operate security controls across our cloud platforms, including GovCloud and secondary clouds. You will own privileged access, encryption architecture, secrets management, and PHI data protection.

The role focuses on preventive and detective controls, automation of evidence collection, and producing control evidence for HITRUST, HIPAA, SOC 2, and FedRAMP. This is a hands-on role on the cloud platform team with security standards in scope.

Qualifications

• 6+ years in information security with 4+ years in cloud security engineering.
• Bachelor's degree required.
• Strong AWS/Azure IAM skills, including cross-account access and federation.
• Hands-on Terraform experience.
• Experience with cloud security services in production.
• Experience in HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53.
• CISSP certification within 180 days of hire.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets.
• Configure, tune, and operate detective controls; drive findings to remediation.
• Build data protection controls for PHI, including lower-environment test data handling.
• Automate evidence collection and support audit and assessment cycles.
• Review application and vendor designs; respond to cloud security escalations.
• Build the cloud logging pipeline that feeds the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS key architecture across accounts.

Skills

AWS IAM

Azure IAM

Cross-account access

Federation

Cloud security engineering

HIPAA compliance

CISSP

Security architecture

Education

Bachelor's degree

Tools

Terraform

Job description

GuideWell seeks a Cloud Security Engineer to build and operate security controls across our cloud platforms, including GovCloud and secondary clouds. You will own privileged access, encryption architecture, secrets management, and PHI data protection.

The role focuses on preventive and detective controls, automation of evidence collection, and producing control evidence for HITRUST, HIPAA, SOC 2, and FedRAMP. This is a hands-on role on the cloud platform team with security standards in scope.