Cloud Security Engineer: IAM, Encryption & Compliance

Florida Blue Group; Town of Florida (NY); Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Disability insurance

Wellness program

Job summary

Florida Blue Group is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms, including IAM, encryption, and secret management. You will own privileged access, KMS architecture, and PHI data protection while enabling HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

This hands-on role collaborates with the cloud platform and security teams, delivering Terraform-based controls, CI/CD integration, and evidence production for audits.

Qualifications

• 6+ years in information security, with 4+ years cloud security engineering
• Bachelor-level degree required
• Strong AWS/Azure IAM skills including cross-account access and federation
• Hands-on Terraform experience and cloud security services in production
• Experience in HIPAA, HITRUST, SOC 2, FedRAMP or NIST 800-53 environments
• CISSP certification within 180 days of hire

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Tune detective controls and drive remediation
• Build PHI data protection controls and lower-environment test data handling
• Automate evidence collection for audits and assessments
• Review designs and respond to cloud security escalations
• Build cloud logging pipeline feeding the SOC
• Deliver controls via Terraform and CI/CD
• Produce evidence for HITRUST, HIPAA, SOC2, FedRAMP and internal audits
• Manage encryption and KMS architecture across accounts

Skills

AWS IAM

Azure IAM

Terraform

Cloud security

PHI data protection

Education

Bachelor's degree

Tools

Terraform

CI/CD

KMS

SIEM

Job description

Florida Blue Group is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms, including IAM, encryption, and secret management. You will own privileged access, KMS architecture, and PHI data protection while enabling HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

This hands-on role collaborates with the cloud platform and security teams, delivering Terraform-based controls, CI/CD integration, and evidence production for audits.