Cloud Security Engineer: IAM, Encryption & HIPAA Controls

Florida Blue; Jacksonville (FL); Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Medical, dental, vision

Retirement plan with employer match

Paid time off

Volunteer time off

2 well-being days

Job summary

Florida Blue is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms, including GovCloud and secondary clouds. You will own privileged access, key encryption architecture, secrets management, and PHI data protection, delivering evidence for HITRUST, HIPAA, SOC 2, and FedRAMP.

You will implement preventive controls (SCPs, IAM, encryption), tune detective controls, automate evidence collection, and contribute to cloud logging pipelines feeding

Qualifications

• 6+ years of information security experience with 4+ years in cloud security engineering.
• Related Bachelor's degree required.
• Strong AWS/Azure IAM skills including cross-account access and federation.
• Hands-on Terraform and cloud security tooling in production.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM, permission boundaries, encryption, secrets.
• Configure, tune, and operate detective controls; drive findings to remediation.
• Build data protection controls for PHI, including test data handling.
• Automate evidence collection and support audit cycles.

Skills

Cross-account access

Federation

Security governance

Education

Bachelor's degree in related field

Tools

Terraform

AWS IAM

Azure IAM

Cloud security services

Job description

Florida Blue is seeking a Cloud Security Engineer to build and operate security controls across GuideWell's cloud platforms, including GovCloud and secondary clouds. You will own privileged access, key encryption architecture, secrets management, and PHI data protection, delivering evidence for HITRUST, HIPAA, SOC 2, and FedRAMP.

You will implement preventive controls (SCPs, IAM, encryption), tune detective controls, automate evidence collection, and contribute to cloud logging pipelines feeding