Remote Principal Cloud Security Architect

HealthEquity, Inc.; Mission (TX); Remote; USD 159,000 - 211,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Tuition assistance

Gym and fitness reimbursement

Wellness program incentives

Job summary

HealthEquity, Inc. is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security across AWS, Azure, and GCP.

You will design posture management, policy-as-code guardrails, and automated controls to reduce exposure, partnering with product and platform teams to bake security into patterns. You will drive threat modeling, secure landing zones, automated remediation, and secure CI/CD integration while mentoring engineers and aligning security with HealthEquity's mission

Qualifications

• This role requires deep hands-on experience securing production cloud environments at enterprise scale.
• Strong background in CNAPP/CSPM, policy-as-code, and threat modeling.
• Experience with multi-cloud security and security tooling across AWS, Azure, and GCP.

Responsibilities

• Lead cloud security posture management across a large multi-subscription estate with CNAPP/CSPM tooling.
• Design policy-as-code guardrails and guard non-compliant infra before production.
• Own security architecture for cloud landing zones, provisioning foundations and logging.
• Build event-driven automated remediation and governance for security baselines.
• Lead network exposure reduction for customer-facing apps and tighten connectivity.
• Define IAM strategy across AWS, Azure, and GCP including federated identity and least privilege.
• Lead threat modeling and coordinate third-party tests and audits.
• Partner to embed code scanning, secret detection, and software supply chain controls into dev workflows.
• Shape security for AI services and AI-enabled development tooling in cloud environments.

Skills

CNAPP/CSPM platforms

Policy-as-code

Threat modeling

Cloud security architecture

Multi-cloud security

Python

PowerShell

Bash

AWS/Azure/GCP security

Tools

AWS

Azure

GCP

AWS Config rules

CloudFormation Guard

Azure Policy

CDK

CI/CD tooling

Job description

HealthEquity, Inc. is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security across AWS, Azure, and GCP.

You will design posture management, policy-as-code guardrails, and automated controls to reduce exposure, partnering with product and platform teams to bake security into patterns. You will drive threat modeling, secure landing zones, automated remediation, and secure CI/CD integration while mentoring engineers and aligning security with HealthEquity's mission