Senior Cloud Security Architect - Elevate Safeguards

HealthEquity; United States; Remote; USD 159,000 - 211,000; Full time

Benefits offered by this job

Performance-based incentives

Restricted stock units

Medical, dental, vision coverage

HSA contribution

Paid parental leave

Job summary

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multi-subscription estate. You will design guardrails, policy-as-code, and automated controls that keep production resources secure.

You will collaborate with product and platform engineering teams to embed secure patterns, drive threat modeling, and mentor junior engineers while advancing HealthEquity's security posture and protecting member data.

Qualifications

• 12+ years of experience in cloud security and secure product development.
• Proven ability to lead secure architecture across multi-subscription estates.
• Hands-on experience with CNAPP/CSPM and policy-as-code guardrails.
• Strong scripting in Python, PowerShell, or Bash for automation.
• Deep knowledge of IAM, SSO, and least privilege concepts.
• Experience with threat modeling and security architecture reviews.
• Familiarity with healthcare or regulated industries is a plus.

Responsibilities

• Lead cloud security posture across a large multi-subscription estate.
• Design policy-as-code guardrails and CI/CD validation for secure delivery.
• Own security architecture for landing zones and provisioning.
• Develop event-driven auto-remediation at scale.
• Reduce customer-facing network exposure and tighten WAF rules.
• Drive IAM strategy across AWS, Azure, and GCP with least privilege.
• Coordinate security testing and remediation with teams and stakeholders.

Skills

Cloud security

CNAPP/CSPM

Policy as code

Python scripting

IAM & SSO

Threat modeling

App security

CI/CD security

Education

Bachelor's degree in CS/Engineering

AWS Certified Security - Specialty

CCSP/CISSP

Tools

AWS

Azure

CloudFormation

CDK

Terraform

Security Hub

GuardDuty

Sentinel

WAF

Job description

HealthEquity is seeking a Principal Cloud Security Engineer, Product Security, to lead cloud security posture across a large multi-subscription estate. You will design guardrails, policy-as-code, and automated controls that keep production resources secure.

You will collaborate with product and platform engineering teams to embed secure patterns, drive threat modeling, and mentor junior engineers while advancing HealthEquity's security posture and protecting member data.