Senior Security Architect — Cloud, AI & HIPAA-Ready (Remote)

Oshi Health; Arkansas City (KS); Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Remote-first

401(k)

Work from home

Job summary

Oshi Health is seeking a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security standards, protect PHI, and integrate security into engineering and AI workflows from the ground up.

The role demands hands-on expertise in application and cloud security, threat modeling, and secure SDLC practices, with a focus on non-human identities and secrets at scale in an AWS environment. Remote-first with US-wide eligibility.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 6+ years in security engineering with app security and cloud security (AWS).
• Hands-on with SAST/DAST and GitHub Advanced Security/CodeQL.
• IAM expertise including Okta, OAuth/OIDC, SAML and MFA.
• Interest in AI/LLM security and agentic systems.

Responsibilities

• Own application and product security, including threat modeling and secure design reviews.
• Design security architecture for agentic SDLC and phase-gate criteria.
• Build and run non-human identity and secrets management at scale.
• Secure AWS environment: IAM, networking, logging, encryption, and protection.
• Review AI/third-party integrations touching PHI and assess data flows.
• Drive vulnerability management and pen-testing findings to closure.

Skills

Security engineering

App security

Cloud security

IAM

AI/LLM security

Python scripting

Shell scripting

Education

BS in CS

Tools

GitHub Advanced Security

CodeQL

SAST/DAST tooling

Okta

OAuth/OIDC

Job description

Oshi Health is seeking a Senior Security Engineer to own the security of a fully remote, cloud-native healthcare platform. You will set security standards, protect PHI, and integrate security into engineering and AI workflows from the ground up.

The role demands hands-on expertise in application and cloud security, threat modeling, and secure SDLC practices, with a focus on non-human identities and secrets at scale in an AWS environment. Remote-first with US-wide eligibility.