Cloud Security Engineer — IAM, KMS & HIPAA/ HITRUST Ready

Florida Blue Group; Northern (KY); Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Health insurance

Retirement plan with employer match

Paid time off

Wellness program

Job summary

The Cloud Security Engineer at Florida Blue builds and operates security controls across GuideWell's cloud platforms, including AWS/Azure, GovCloud, and secondary clouds. You will implement preventive controls, IAM policies, KMS, encryption, and secrets management, and own audit-ready evidence for HIPAA, HITRUST, SOC 2, and FedRAMP.

You will automation with Terraform and CI/CD, tune detective controls, and collaborate with the security organization to meet control standards while enabling secure

Qualifications

• 6+ years in information security with 4+ years in cloud security engineering.
• Bachelor's degree required.
• Strong AWS/Azure IAM, cross-account access and federation.
• Hands-on Terraform.
• Experience with cloud-native security services in production.
• Experience in HIPAA/HITRUST/SOC 2/FedRAMP/NIST 800-53 environments.
• Must obtain CISSP within 180 days of hire.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets.
• Configure, tune, and operate detective controls; drive remediation.
• Build data protection controls for PHI, including lower-environment test data handling.
• Automate evidence collection and support audit and assessment cycles.
• Review application and vendor designs; respond to cloud security escalations.
• Build the cloud logging pipeline that feeds the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS key architecture across accounts.

Skills

AWS IAM

Azure IAM

Cross-account access

Terraform

Cloud security

CI/CD

Security controls

Education

Bachelor's degree

Tools

Terraform

Job description

The Cloud Security Engineer at Florida Blue builds and operates security controls across GuideWell's cloud platforms, including AWS/Azure, GovCloud, and secondary clouds. You will implement preventive controls, IAM policies, KMS, encryption, and secrets management, and own audit-ready evidence for HIPAA, HITRUST, SOC 2, and FedRAMP.

You will automation with Terraform and CI/CD, tune detective controls, and collaborate with the security organization to meet control standards while enabling secure