Remote Senior Cloud Security Engineer (HIPAA)

Healthmark Group; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls for cloud workloads, with a focus on the AWS environment and PHI protection. You will define guardrails, enforce policy-as-code, and drive secure architectures across projects.

You will mentor security engineers, collaborate with DevOps and development teams, and help achieve SOC 2, HITRUST, and HIPAA compliance in a fast-moving remote setup.

Qualifications

• Bachelor's degree in CS or information security or equivalent practical engineering experience.
• Minimum 5–7 years in cybersecurity, infrastructure engineering, or DevOps with at least 3 years in AWS compliance-focused engineering.
• Strong knowledge of HIPAA, HITRUST, SOC 2 controls in cloud environments.

Responsibilities

• Design and build enterprise-grade security controls using native AWS services to protect PHI.
• Maintain secure multi-account AWS architecture with guardrails and baseline configuration for HIPAA/HITRUST/SOC 2.
• Implement policy-as-code with Terraform/CloudFormation and tools like OPA/Checkov for pre-deployment controls.
• Embed security testing, container scanning, and secrets management into CI/CD pipelines for audit readiness.
• Collaborate with development and cloud ops to triage and remediate vulnerabilities and incidents.

Skills

AWS

Cloud security

Terraform

CloudFormation

Scripting

IAM

Security monitoring

Education

Bachelor's degree in Computer Science or Information Security

Tools

Terraform

AWS CloudFormation

OPA

Checkov

Rego

CloudTrail

CloudWatch

SIEM

Job description

HealthMark Group is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls for cloud workloads, with a focus on the AWS environment and PHI protection. You will define guardrails, enforce policy-as-code, and drive secure architectures across projects.

You will mentor security engineers, collaborate with DevOps and development teams, and help achieve SOC 2, HITRUST, and HIPAA compliance in a fast-moving remote setup.