Cloud Security Operations Engineer

Provider Resources, LLC; Erie (Erie County); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401k plan

PTO

Job summary

Provider Resources, Inc. is seeking a Cloud Security Operations Engineer to own the operational security backbone of a federally certified environment.

You will manage identity and access controls, incident response, PHI safeguards, backup and recovery, vendor risk, and authentication security to meet CMS and URAC standards. The role requires hands-on expertise in security operations, MFA/SSO, and vendor oversight, with experience in HIPAA-related safeguards and regulatory audits.

Qualifications

• 5+ years of IT security ownership including identity/access management and security operations.
• Knowledge of HIPAA Security Rule and safeguards for PHI.
• Hands-on backup/disaster recovery testing experience.
• Experience implementing MFA/SSO and enterprise password policies.
• Experience running incident response processes with documentation and escalation.
• Experience growing and overseeing a security program including vendor onboarding and oversight.

Responsibilities

• Serve as first responder for security incidents, containing and documenting per Incident Response Plan.
• Administer technical safeguards protecting the organization from external and insider threats.
• Own backup integrity and disaster recovery testing against defined recovery targets.
• Vet and monitor vendors touching PRI systems or data, maintain vendor risk register.
• Administer password policy, MFA, and SSO, and investigate anomalous login activity.
• Design and implement information security monitoring platforms ongoing.
• MSSP day-to-day implementation and ownership.

Skills

Identity access mgmt

Security operations

Information security

HIPAA security

Backup and DR

Incident response

Tools

MFA/SSO

Job description

Provider Resources, Inc. (PRI) is looking for a Cloud Security Operations Engineer to own the operational security backbone of a federally certified IDRE and IRO. As PRI scales through a period of rapid growth, this role is the hands-on operator who keeps access, incident response, PHI safeguards, backup and recovery, vendor risk, and authentication security running to a standard that survives CMS and URAC examination.

What You'll Do

• Serve as first responder for security incidents, containing and documenting per PRI's Incident Response Plan
• Administer technical safeguards protecting the organization from both external and insider threats.
• Own backup integrity and disaster recovery testing against defined recovery targets
• Vet and monitor vendors that touch PRI systems or data, and maintain the vendor risk register
• Administer password policy, MFA, and SSO, and investigate anomalous login activity
• Design and Implement information security monitoring platforms on an ongoing basis.
• MSSP day to day implementation and ownership

What You Bring

• 5+ years of IT experience with direct, handson ownership of identity/access management, security operations, or information security practices
• Working knowledge of the HIPAA Security Rule and experience operating technical safeguards for PHI.
• Handson backup/DR experience with documented recovery testing.
• Experience administering MFA/SSO and enterprise password policy (Microsoft Entra ID, Okta, or equivalent).
• Experience running or directly supporting a security incident response process, including documentation and escalation.
• Direct experience in implementing and growing a security program including Vendor onboarding and oversight.

Nice to Have

• Prior experience in a healthcare, health plan, IDRE/IRO, or other CMSregulated environment.
• Security certification: CompTIA Security+, CISSP (or Associate of ISC2), or CISA.
• Experience supporting SOC 2, URAC, or similar thirdparty audits.

As an EEO/Affirmative Action Employer all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status.

Benefits and Compensation Provider Resources provides a competitive benefits package that includes access to Medical, Dental, and Vision Insurance, Life Insurance, Disability, Health Savings Account (HSA), Flexible Spending Accounts (FSA), Critical Illness, Accident, Legal and ID Theft, 401k plan, PTO. The anticipated salary range for fully qualified candidates applying for this role will be above (not including discretionary bonus, equity, and benefits). The final salary offered will be dependent on several factors that include but is not limited to relevant previous experience including duration and type of experience within the industry, education, and internal equity.