Staff Cloud Security Engineer (Remote & Automation)

Included Health, Inc.; Northern (KY); Hybrid; USD 190,000 - 280,000; Full time

Benefits offered by this job

Remote‑first culture

401(k) savings plan

Job summary

Included Health, Inc. seeks a Staff Cloud Security Engineer to design and engineer robust security controls in our cloud environments, primarily AWS with GCP considerations.

You will build automation and security tooling in Python/Go and Terraform to secure product infrastructure and reduce PHI exfiltration, reporting to the CISO in a remote role. You will work with infrastructure, software, DevOps, and product teams to implement secure, auditable access controls, container hardening, and secure

Qualifications

• 5+ years of cloud security experience with AWS, and familiarity with GCP.
• Hands-on software development in Python and Go for security automation.
• Experience designing authorization and access control frameworks (RBAC/ABAC) and JIT access.
• A strong background in IaC with Terraform and secure CI/CD practices.
• Knowledge of HIPAA-related security standards and data protection.

Responsibilities

• Design and implement a comprehensive cloud authorization framework.
• Lead JIT access projects to minimize standing privileges.
• Develop security automation tools in Python/Go.
• Implement Terraform-based security configurations and audits.

Skills

Cloud security

Python

Go

Terraform

Automation

RBAC/ABAC

Just-In-Time access

CI/CD security

WAF security

Threat modeling

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Tools

Terraform

AWS

GCP

Kubernetes

CloudWatch

Job description

Included Health, Inc. seeks a Staff Cloud Security Engineer to design and engineer robust security controls in our cloud environments, primarily AWS with GCP considerations.

You will build automation and security tooling in Python/Go and Terraform to secure product infrastructure and reduce PHI exfiltration, reporting to the CISO in a remote role. You will work with infrastructure, software, DevOps, and product teams to implement secure, auditable access controls, container hardening, and secure