Senior Cloud Security Engineer

ConsultNet Technology Services and Solutions; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

ConsultNet Technology Services and Solutions is seeking a Senior Cloud Security Engineer to design, implement, and maintain security controls across a regulated AWS environment, protecting PHI and enabling secure-by-default infrastructure. You will lead security initiatives, collaborate with development, cloud operations, GRC, and MSSP teams, and serve as a technical leader within Security Operations.

Required: 5+ years in security/infra roles, 3+ years AWS security, HIPAA/HITRUST/SOC 2

Qualifications

• 5+ years in cybersecurity, infra engineering, DevOps, or related fields.
• 3+ years hands-on AWS security in compliance-driven environments.
• Experience with PHI protection, encryption, and least-privilege controls.
• Familiarity with HIPAA, HITRUST CSF, SOC 2.

Responsibilities

• Design, implement, and maintain security controls in a regulated AWS cloud.
• Embed security into CI/CD pipelines and automate guardrails.
• Collaborate with development, cloud ops, GRC, and MSSPs; act as security operations lead.

Skills

AWS security

Cloud security architecture

Regulatory compliance

CI/CD security

Python scripting

Tools

Terraform

AWS CloudFormation

OPA/Checkov

Job description

Senior Cloud Security Engineer
Remote
Direct Hire
Salary - 120-150k

Our client is a growing healthcare technology company that provides digital solutions designed to modernize and streamline administrative processes across the healthcare industry. The organization is in a major transformation phase, modernizing legacy systems, building new products, and automating traditionally manual workflows. The environment handles sensitive healthcare data and operates under regulatory and security frameworks including HIPAA, HITRUST, and SOC 2.

Job Description

We are looking for a Senior Cloud Security Engineer to design, implement, and maintain security controls across a highly regulated AWS cloud environment. This person will take a hands‑on role in securing applications, infrastructure, and workloads containing Protected Health Information (PHI), while establishing cloud security guardrails, automation, detection capabilities, and secure‑by‑default infrastructure standards. The Senior Cloud Security Engineer will partner closely with application development, cloud operations, GRC, managed security providers, and other engineering teams while also serving as a technical leader and escalation point within Security Operations.

Required Skills

• 5-7+ years of experience in cybersecurity, infrastructure engineering, DevOps, or related areas
• 3+ years of hands‑on AWS security engineering experience in compliance-driven environments
• Deep experience with AWS services including VPC, IAM, EC2, S3, RDS, Lambda, and EKS
• Experience designing secure multi‑account AWS environments using AWS Organizations, organizational units, guardrails, IAM policies, and Service Control Policies
• Strong experience protecting sensitive data and PHI using encryption, AWS KMS, least‑privilege access controls, and secure cloud architecture
• Production‑level experience with Terraform and/or AWS CloudFormation
• Experience implementing policy‑as‑code using tools such as OPA, Checkov, or Rego
• Experience embedding security controls, vulnerability scanning, container scanning, and secrets management into CI/CD pipelines
• Strong understanding of HIPAA, HITRUST CSF, SOC 2, or similar compliance frameworks
• Experience with cloud security incident response, investigation, containment, and root cause analysis
• Hands‑on experience with AWS CloudTrail, CloudWatch, SIEM platforms, and cloud detection engineering
• Experience with SAST, DAST, CSPM, vulnerability management, and remediation
• Strong Linux security and hardening experience, including access controls, logging, patching, and benchmark‑based configuration
• Scripting and automation experience using Python/Boto3, PowerShell, or similar technologies

Bonus/Soft

• AWS Certified Security - Specialty
• CISSP or CCSP certification
• HITRUST Certified CSF Practitioner (CCSFP)
• Experience with Windows, Microsoft 365, Entra ID, and Active Directory security
• Experience securing physical or hybrid infrastructure and networks
• Healthcare technology experience
• Familiarity with DICOM, PACS, HL7, or FHIR
• Experience integrating and securing environments following mergers, acquisitions, or platform integrations

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.