Remote Principal Cloud Security Engineer

HealthEquity, Inc.; United States; Remote; USD 159,000 - 211,000; Full time

Benefits offered by this job

Medical, dental, and vision

401(k) match

Uncapped paid time off

Parental leave

Tuition assistance

Gym and fitness reimbursement

Wellness program incentives

Ongoing education & tuition assistance

Job summary

HealthEquity, Inc. is seeking a Principal Cloud Security Engineer, Product Security, to lead the security of our cloud environments and shape secure patterns across multiple product domains.

You will design posture management, policy-as-code guardrails, and automated controls, partner with engineering teams, and drive remediation with a risk-based, defense-in-depth approach. This remote role demands deep hands-on experience and strong architectural judgment.

Qualifications

• Extensive hands-on experience securing production cloud environments at scale.
• Architectural security background with threat modeling experience.
• Experience with CNAPP/CSPM and posture management.
• Strong knowledge of IAM, SSO, and least privilege principles.
• Proficiency in security automation and scripting languages.
• Familiarity with security services across AWS/Azure/GCP.

Responsibilities

• Lead cloud security posture management across a large multi-subscription estate.
• Design policy-as-code guardrails and CI/CD security validations.
• Own security architecture for cloud landing zones and provisioning baselines.
• Develop event-driven automated remediation for security controls.
• Lead threat modeling and coordinate third-party security tests.
• Collaborate with application security to embed code scanning and SBOM controls.

Skills

Cloud security engineering

CNAPP / CSPM platforms

Policy-as-code

AWS

Azure

GCP

Threat modeling

IAM / SSO / access management

Security automation (Python/PowerShell

Tools

AWS Config

CloudFormation Guard

Azure Policy

CDK

CI/CD tools

Job description

HealthEquity, Inc. is seeking a Principal Cloud Security Engineer, Product Security, to lead the security of our cloud environments and shape secure patterns across multiple product domains.

You will design posture management, policy-as-code guardrails, and automated controls, partner with engineering teams, and drive remediation with a risk-based, defense-in-depth approach. This remote role demands deep hands-on experience and strong architectural judgment.