Cloud Security Strategy Lead (Remote)

HealthEquity; Draper (UT); Remote; USD 159,000 - 211,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Tuition assistance

Gym reimbursement

Wellness program incentives

Job summary

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multi-subscription estate. You will design guardrails, enforce secure patterns, and drive remediation with product and platform teams.

With 12+ years in cloud security, you will own security architecture for landing zones, build automated remediation, and guide engineering toward secure-by-default patterns in AWS, Azure, and beyond.

Qualifications

• Extensive experience architecting, building, and operating cloud security controls in production AWS and Azure.
• Deep experience with CNAPP/CSPM platforms for posture management and risk-based prioritization.
• Proficiency with policy-as-code and preventive guardrails (SCPs, AWS Config, Azure Policy).
• Strong knowledge of native security services (GuardDuty, Defender for Cloud, Security Hub, WAF).
• Automation background with Python, PowerShell, and Bash for security tooling.

Responsibilities

• Lead cloud security posture management across a multi-subscription estate with CNAPP/CSPM tooling.
• Design and build policy-as-code guardrails and CI/CD validation to block non-compliant infra.
• Own security architecture for landing zones and provisioning to inherit baselines by default.
• Build event-driven auto-remediation enforcing security baselines at scale.
• Reduce customer-facing app exposure using WAF, tighter SGs/NSGs, and private connectivity.
• Define IAM strategy across AWS, Azure, and GCP including SSO, least privilege, and conditional access.
• Lead threat modeling and architecture reviews; coordinate third-party tests and audits.
• Partner with App Security and Vulnerability Management to embed SAST, SCA, secrets detection.
• Establish guardrails for AI services and MCP security; mentor engineers and evolve tooling.

Skills

Cloud security

AWS

Azure

Policy-as-code

Threat modeling

Automation

Scripting

Network security

Tools

CNAPP/CSPM

Azure Policy

CloudFormation Guard

AWS Config

GuardDuty

Security Hub

WAF/Firewall

Job description

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multi-subscription estate. You will design guardrails, enforce secure patterns, and drive remediation with product and platform teams.

With 12+ years in cloud security, you will own security architecture for landing zones, build automated remediation, and guide engineering toward secure-by-default patterns in AWS, Azure, and beyond.