Remote Cloud Security Engineer — HIPAA/SOC 2 Focus

Healthmark Medical; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls across AWS cloud environments, ensuring PHI protection and compliance with HIPAA, HITRUST, and SOC 2.

You will lead security operations, mentor engineers, and drive secure-by-default architectures while coordinating with DevOps and application teams in a remote capacity within the United States.

Qualifications

• 5–7 years in cybersecurity, infra engineering, or DevOps with at least 3 years in AWS‑focused compliance engineering.
• Deep knowledge of AWS services handling PHI (VPC, IAM, EC2, S3, RDS, Lambda, EKS).
• Experience securing Linux systems and cloud workloads with proper access control and patching.
• Familiarity with HIPAA/HITRUST SOC 2 frameworks and audit readiness.

Responsibilities

• Design and build enterprise‑grade security controls using native AWS services for PHI protection.
• Maintain a secure multi‑account AWS architecture with guardrails and baseline config.
• Implement policy‑as‑code using OPA/Checkov/Rego to enforce HIPAA/HITRUST/SOC 2 controls before deployment.
• Enforce data encryption at rest/in transit with AWS KMS to meet HIPAA/HITRUST requirements.
• Establish least‑privilege access, IAM policies, SCPs, and AWS Organizations boundaries.
• Integrate security testing (SAST/DAST/CSPM) into CI/CD pipelines for audit readiness.

Skills

AWS security

HIPAA compliance

Cloud incident response

IAM governance

Security auditing

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

AWS CloudFormation

OPA

Checkov

Job description

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls across AWS cloud environments, ensuring PHI protection and compliance with HIPAA, HITRUST, and SOC 2.

You will lead security operations, mentor engineers, and drive secure-by-default architectures while coordinating with DevOps and application teams in a remote capacity within the United States.