Remote Principal Cloud Security Engineer — CNAPP & IAM

Digitailor; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Wellness program incentives

Job summary

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multicloud estate. You will design guardrails, implement policy-as-code, and coordinate remediation with product and platform teams to secure production environments.

Your background in application security and threat modeling will ensure security patterns are the default. You will mentor engineers and evolve security tooling and automation across the organization.

Qualifications

• 12+ years in cloud security or related discipline.
• Experience securing production cloud environments at enterprise scale.
• Ability to mentor engineers and lead cross-functional initiatives.

Responsibilities

• Lead architecture and evolution of cloud security posture management across a large, multi-subscription estate.
• Design policy-as-code guardrails to block non-compliant infrastructure in CI/CD.
• Own security architecture for cloud landing zones, accounts, and provisioning with secure baselines.
• Build event-driven auto-remediation for security baselines at scale.
• Lead network exposure reduction for customer-facing apps and private connectivity.
• Define IAM strategy across AWS, Azure, and GCP with least privilege and conditional access.
• Coordinate third-party tests, translate findings to prioritized remediation plans.
• Integrate code scanning, secret detection, and software supply chain controls into developer workflows.

Skills

CNAPP/CSPM

Policy-as-code

Cloud security architecture

AWS/Azure/GCP security

Security automation

Python

PowerShell

Bash

Threat modeling

Incident response

Tools

AWS

Azure

GCP

CloudFormation

CDK

Azure Policy

CNAPP tooling

Job description

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multicloud estate. You will design guardrails, implement policy-as-code, and coordinate remediation with product and platform teams to secure production environments.

Your background in application security and threat modeling will ensure security patterns are the default. You will mentor engineers and evolve security tooling and automation across the organization.