Senior Cloud Security Engineer (AWS)

Techstack; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work

Education courses reimbursement

English courses

20 days off

7 sick days

Legal support

Appreciation gifts

Career growth opportunities

Job summary

Techstack is a US-based technology product engineering company seeking an experienced Infrastructure/Security Engineer to operate and secure AWS infrastructure across multiple accounts. You will administer Microsoft 365 and Entra ID, manage identity and SaaS integrations, monitor security, and coordinate incident response.

The role requires 5+ years in infra/security, hands-on AWS, and strong PowerShell plus Python or Bash skills.

Qualifications

• Experience working in a SOC 2‑compliant organization, including at least one audit or assessment cycle.
• Hands‑on experience with MDR/SIEM tools.
• Experience with tools similar to Cloudflare Zero Trust.
• Hands‑on AWS administration (AWS should be your strongest platform).
• 5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.
• Working‑level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.
• Experience with Windows endpoints and Windows/Linux servers.
• Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.
• Experience with incident response, endpoint security, vulnerability management, and patching.
• Strong PowerShell and practical Python or Bash skills.
• Good written English, independent ownership, and effective remote collaboration.
• Ability to learn fast and fill knowledge gaps on your own.

Responsibilities

• Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.
• Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.
• Manage identity, access, endpoint compliance, and secure SaaS integrations.
• Monitor security and service health, investigate alerts, and coordinate incident response.
• Support backup, recovery, patching, capacity management, and infrastructure as code.
• Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.
• Create automation, operational documentation, and runbooks.
• Prepare clear handoffs to the US team at the end of each shift.
• Participate in planned maintenance.

Skills

SOC 2

MDR/SIEM

AWS administration

PowerShell

Python

Cloud networking

Tools

Terraform

CloudFormation

Entra ID

Intune

Microsoft 365

Job description

Our client is a US-based healthcare technology company that develops medical-device technology and provides remote cardiac monitoring services. Its environment combines connected medical devices, cloud software, and clinical workflows, with a strong focus on service reliability, patient-data security, and regulatory compliance.

AWS: IAM, Identity Center, EC2, VPC, S3, RDS/Aurora, CloudWatch, CloudTrail, GuardDuty, Inspector, KMS, Systems Manager, Secrets Manager

Systems: Windows and Linux administration

IaC and automation: Terraform and/or CloudFormation, PowerShell, Python or Bash, Microsoft Graph and AWS APIs

Security platforms: Cloudflare Zero Trust, Purview, MDR platforms

Fundamentals: networking, DNS, TLS, identity, logging, cloud security

Your team

You will be part of the security function of a US-based company and will report directly to the CISO. On a daily basis, you will work with the DevOps team and with colleagues from software engineering, Corporate IT, Clinical Operations, and Quality/Regulatory. Your shift covers the hours when the US team is offline, so you will own your coverage window and hand over to the US Central team with clear, written updates.

Culture

We are committed to implementing high standards in the technology industry, and it is the fundamental mission of our work. To achieve this goal, the company and all its members are constantly evolving.

Each of us has the opportunity to contribute to the product, the company, the team, the industry, and our personal development. At Techstack, you have the option to choose from various growth opportunities that align with your interests:

• meetups, where you can share your knowledge and develop simultaneously by sharing your experiences within the company and local technical communities;
• roles such as a mentor or a technical lead. In any of these roles, you will assist junior professionals and share your knowledge and experiences with them.
• participation in our technical Guilds, where you can discuss technical solutions, approaches, and industry trends.

All of these elements contribute to shaping the culture and expertise within both our team and the company as a whole.

Your responsibilities

Operate, secure, and troubleshoot AWS infrastructure across multiple accounts.

Administer Microsoft 365, Entra ID, Intune, Defender, Exchange Online, Teams, SharePoint, and OneDrive.

Manage identity, access, endpoint compliance, and secure SaaS integrations.

Monitor security and service health, investigate alerts, and coordinate incident response.

Support backup, recovery, patching, capacity management, and infrastructure as code.

Maintain controls and audit-ready evidence for HIPAA, SOC 2, HITRUST, and other regulatory requirements.

Create automation, operational documentation, and runbooks.

Prepare clear handoffs to the US team at the end of each shift.

Participate in planned maintenance.

It's about you

Experience working in a SOC 2-compliant organization, including at least one audit or assessment cycle.

Hands‑on experience with MDR/SIEM tools.

Experience with tools similar to Cloudflare Zero Trust.

Hands‑on AWS administration (AWS should be your strongest platform).

5+ years of experience in infrastructure engineering, systems administration, cloud operations, or security operations, with independent ownership of production systems.

Working‑level experience with Microsoft 365 and Entra ID, plus a basic understanding of Intune.

Experience with Windows endpoints and Windows/Linux servers.

Strong troubleshooting skills across cloud infrastructure, networking, identity, and security.

Experience with incident response, endpoint security, vulnerability management, and patching.

Strong PowerShell and practical Python or Bash skills.

Good written English, independent ownership, and effective remote collaboration.

Ability to learn fast and fill knowledge gaps on your own.

Will be a plus:

Knowledge of HIPAA and HITRUST practices.

Hands‑on experience with Cloudflare Zero Trust and Purview.

Deeper Intune and Windows Autopilot experience.

Terraform and/or CloudFormation.

Experience in healthcare, medical devices, or another regulated industry.

What we havefor you

Stable and long‑term position in an experienced team.

Broad opportunities for professional and career growth, including professional challenges that encourage personal development, meetups, hackathons, professional communities, and more.

Horizontal connections and the absence of micromanagement foster a collaborative environment in which all team members are accessible to one another for any concerns.

Hubs in Kharkiv, Kyiv, Lviv, and Wrocław (Poland), or everything necessary for remote work.

Up to 50% compensation for the cost of educational courses and conferences to support professional development.

Free English language and business English courses.

20 days off and 7 sick days to support your health and well‑being.

Legal and accounting support.

Appreciation gifts for significant events and occasions.

About us

Techstack is a technology product engineering company that sets an example for high development standards in the IT industry. We empower each team member to influence the development of the product, company, and processes.