Cloud Security Engineer — IAM, KMS & PHI Protection (Hybrid)

Socket.dev; United States; Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Healthcare benefits

Retirement Savings Plan

Paid time off

Job summary

GuideWell is seeking a Cloud Security Engineer to build and operate security controls across multiple cloud platforms as the company migrates infrastructure. You will own privileged access, encryption architecture, and secrets management while ensuring HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

The role requires hands-on work on the cloud platform team, collaborating with security to set and enforce control standards and integrate security into CI/CD pipelines.

Qualifications

• 6+ years in information security; 4+ years in cloud security
• Bachelor's degree required
• Strong AWS/Azure IAM skills, cross-account access and federation
• Hands-on Terraform
• Experience with cloud-native security services in production
• Experience in HIPAA/HITRUST/SOC 2/FedRAMP/NIST 800-53 environments

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Configure, tune, and operate detective controls; drive findings to remediation
• Build data protection controls for PHI
• Automate evidence collection and support audit cycles
• Review designs; respond to cloud security escalations
• Build cloud logging pipeline for SOC
• Deliver controls through Terraform and CI/CD
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP
• Manage encryption and KMS across accounts

Skills

Cloud security engineering

IAM federation

Regulatory compliance

Cloud security architecture

Education

Bachelor's degree

Tools

Terraform

Job description

GuideWell is seeking a Cloud Security Engineer to build and operate security controls across multiple cloud platforms as the company migrates infrastructure. You will own privileged access, encryption architecture, and secrets management while ensuring HITRUST, HIPAA, SOC 2, and FedRAMP compliance.

The role requires hands-on work on the cloud platform team, collaborating with security to set and enforce control standards and integrate security into CI/CD pipelines.