Senior Cloud Security Architect - Remote (Healthcare AI)

Oshi Health; Kansas; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

401(k)

Remote-first

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will design security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design reviews, and secure code reviews for a member-facing app and its APIs, ensuring HIPAA and NIST alignment while enabling scalable, trusted growth.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with cloud security (AWS).
• Hands-on with secure SDLC tooling: SAST/DAST, GitHub Advanced Security/CodeQL.
• Strong in identity and access management: Okta, OAuth/OIDC, SAML, MFA.
• Familiarity with securing AI/LLM/agentic systems and risk.
• Comfortable as sole security lead on a small cross-functional team.

Responsibilities

• Own application and product security with threat modeling and secure design review.
• Design security architecture for agentic SDLC and phase-gate criteria.
• Manage non-human identity and secrets at scale across SaaS and AWS.
• Secure AWS environment end-to-end: IAM, networking, logging, encryption.
• Enforce security tooling (CodeQL, secret scanning, review policies).
• Review AI and vendor integrations touching PHI for data flows and retention.
• Own vulnerability management and penetration-testing relationships.
• Support HIPAA Security Rule safeguards and detection/response automation.

Skills

Security engineering

Cloud security (AWS)

SAST/DAST

Identity management

Python scripting

Education

Bachelor's degree in Computer Science

Tools

GitHub Advanced Security

CodeQL

Okta

OAuth/OIDC

SAML

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of our fully remote, cloud-native healthcare platform. You will design security architecture, harden identity and secrets management, and embed security into engineering and AI workflows from the ground up.

You will lead threat modeling, secure design reviews, and secure code reviews for a member-facing app and its APIs, ensuring HIPAA and NIST alignment while enabling scalable, trusted growth.