Remote Senior Cloud Security Engineer - AWS HIPAA

Healthmark Group; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls across AWS for PHI workloads. The role focuses on guardrails, encryption, and policy-as-code within a remote US-based environment.

You will mentor security engineers, integrate security into CI/CD, and drive audit readiness with SOC 2 and HIPAA/HITRUST controls, while collaborating with cross-functional teams to protect healthcare data.

Qualifications

• 5–7 years in cybersecurity, infrastructure engineering, or DevOps with 3+ years in AWS compliance-focused engineering.
• Deep hands-on knowledge of core AWS services used for PHI processing (VPC, IAM, EC2, S3, RDS, Lambda, EKS).
• Experience securing Linux systems and cloud workloads, including patching and logging.
• Familiarity with HIPAA, HITRUST, SOC 2 or equivalent frameworks in cloud.
• Experience with incident response, threat detection, and remediation in AWS.
• Production experience deploying secure infrastructure with Terraform or CloudFormation and policy-as-code integration.
• Strong scripting in PowerShell or Python for automation and evidence gathering.
• Excellent communication to convey risk and status to engineers, leadership, and assessors.
• Bachelor’s degree or equivalent practical engineering experience.

Responsibilities

• Design and implement enterprise-grade security controls in AWS to protect PHI across cloud environments.
• Maintain a secure multi-account AWS architecture with guardrails and baseline configurations.
• Author and review secure templates (Terraform/CloudFormation); enforce controls via policy-as-code.
• Enforce encryption at rest and in transit using AWS KMS and related services.
• Enforce least-privilege access models and SCPs within AWS Organizations.
• Integrate security testing and secrets management into CI/CD pipelines for audit readiness.
• Collaborate with development and ops teams to triage and remediate vulnerabilities.
• Develop detection rules using CloudTrail and CloudWatch; monitor threats and incidents.
• Lead cloud security incident investigations and post-incident improvements.
• Support third-party risk assessments and security certifications.

Skills

AWS security

Terraform

CloudFormation

IAM & SCPs

PHI HIPAA SOC2

SAS/CIS/CI/CD security

Python/PowerShell

CloudTrail/CloudWatch

Education

Bachelor's degree in CS/InfoSec or equivalent

Tools

Terraform

AWS CloudFormation

OPA/Checkov/Rego

CloudTrail

CloudWatch

KMS

SIEM tooling

Job description

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls across AWS for PHI workloads. The role focuses on guardrails, encryption, and policy-as-code within a remote US-based environment.

You will mentor security engineers, integrate security into CI/CD, and drive audit readiness with SOC 2 and HIPAA/HITRUST controls, while collaborating with cross-functional teams to protect healthcare data.