Cloud Security Engineer — Secure Cloud & Automation

Gifthealth Inc; Columbus (OH); On-site; USD 120,000 - 170,000; Full time

Job summary

Gifthealth Inc. is seeking a Cloud Security Engineer to design and implement security controls across cloud infrastructure and cloud-native environments.

You will collaborate with Infrastructure, Platform Engineering, DevOps, IAM, and Security teams to establish secure architectures, automate controls, and uphold governance. The role requires hands-on cloud security expertise and a strong background in IaC and multi-cloud boundaries.

Qualifications

• Hands-on experience securing environments within at least one major public cloud platform.
• Knowledge of IAM, networking, encryption, secrets management, logging and monitoring, vulnerability management, and cloud-native security services.
• Experience securing workloads across hybrid environments spanning direct cloud infrastructure (AWS) and externally managed platforms (e.g., Heroku, Snowflake).
• Experience with Infrastructure-as-Code and building guardrails using policy/automation or IaC.
• Familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks.
• Preferred: strong AWS security experience in multi-account environments and familiarity with Kubernetes/serverless tech.

Responsibilities

• Design, implement, and maintain security controls across the organization’s cloud infrastructure.
• Partner with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams to establish secure cloud architectures.
• Identify insecure configurations and excessive permissions; prioritize findings by risk.
• Develop automated checks and secure cloud guardrails; embed security into CI/CD pipelines.
• Support security monitoring, detections, and incident response for cloud environments.
• Evaluate and secure hybrid cloud boundaries between AWS and PaaS like Heroku.

Skills

Cloud security

IAM

Networking

Encryption

Logging & monitoring

Vulnerability management

Cloud security posture management

IaC (Terraform)

IaC (CloudFormation)

Kubernetes

Serverless

Snowflake / BigQuery

Hybrid cloud security

VPN architectures

Tools

Terraform

CloudFormation

Kubernetes

AWS

Heroku

Snowflake

BigQuery

Job description

Gifthealth Inc. is seeking a Cloud Security Engineer to design and implement security controls across cloud infrastructure and cloud-native environments.

You will collaborate with Infrastructure, Platform Engineering, DevOps, IAM, and Security teams to establish secure architectures, automate controls, and uphold governance. The role requires hands-on cloud security expertise and a strong background in IaC and multi-cloud boundaries.