Senior AWS Cloud Security Engineer

Boston Medical Center (BMC); United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Boston Medical Center Health System (BMCHS) is seeking an AWS Cloud Security Engineer to lead the development and management of our public cloud security strategy. You will collaborate with infrastructure, application, and partner teams to ensure compliant, secure, and cost-effective AWS solutions.

The role requires hands-on security expertise in AWS services, incident response, and knowledge transfer to engineers, with a focus on HIPAA/NIST guidance and strong communication skills.

Qualifications

• 3+ years of information security in a public cloud (AWS, Azure, GCP).
• Strong AWS expertise required and relevant certifications preferred.
• Healthcare domain knowledge and HIPAA-related exposure is a plus.

Responsibilities

• Design, manage, and implement cloud security policies and projects.
• Provide architectural security guidance for public cloud environments.
• Review designs and provide security feedback on changes.
• Communicate technical data to audiences with varying levels of knowledge.
• Collaborate with internal security and infrastructure teams to remediate issues.
• Operate cloud firewall, DLP, and vulnerability tooling.
• Support incident response and follow playbooks.
• Research new security technologies and run PoC tests.
• Document security standards and processes.
• Contribute to secure design decisions for new tech.
• Coordinate remediation of vulnerabilities in cloud environments.
• Educate workforce on security topics and mentor junior engineers.

Skills

AWS GuardDuty

Security Hub

Macie

IAM / SSO

CloudWatch

CloudFront / WAF

Terraform

CloudFormation

Python scripting

Networking (VPC, SG, NACLs)

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

CloudFormation

Azure AD / ADFS

Job description

Boston Medical Center Health System (BMCHS) is seeking an AWS Cloud Security Engineer to lead the development and management of our public cloud security strategy. You will collaborate with infrastructure, application, and partner teams to ensure compliant, secure, and cost-effective AWS solutions.

The role requires hands-on security expertise in AWS services, incident response, and knowledge transfer to engineers, with a focus on HIPAA/NIST guidance and strong communication skills.