Cloud Security Engineer—Preventive Controls & IAM Architect

WEB-TPA, Inc.; United States; Hybrid; USD 109,000 - 178,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

Disability benefits

Retirement plan with match

Paid time off

Holidays

Wellness program

Job summary

GuideWell is seeking a Cloud Security Engineer to build and operate security controls across cloud platforms during migration from GovCloud and other environments. You will own privileged access, encryption, secrets management, and the logging pipeline feeding the security operations center.

This hands-on role requires 6+ years in information security with 4+ years in cloud security, strong IAM skills, Terraform experience, and familiarity with HIPAA/HITRUST, SOC 2, and FedRAMP.

Qualifications

• 6+ years related work experience in information security.
• 4+ years in cloud security engineering.
• Strong AWS/Azure IAM skills, cross-account access and federation.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Configure, tune, and operate detective controls; drive findings to remediation
• Build data protection controls for PHI, including lower-environment test data handling
• Automate evidence collection and support audit and assessment cycles
• Review application and vendor designs; respond to cloud security escalations
• Build the cloud logging pipeline that feeds the security operations center
• Deliver controls through Terraform and CI/CD
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit
• Manage encryption and KMS key architecture across accounts

Skills

Cloud security engineering

Education

Bachelor's degree

Tools

Terraform

Job description

GuideWell is seeking a Cloud Security Engineer to build and operate security controls across cloud platforms during migration from GovCloud and other environments. You will own privileged access, encryption, secrets management, and the logging pipeline feeding the security operations center.

This hands-on role requires 6+ years in information security with 4+ years in cloud security, strong IAM skills, Terraform experience, and familiarity with HIPAA/HITRUST, SOC 2, and FedRAMP.