Cyber Security Engineer (Cloud Security)

As a Cyber Security Engineer specializing in Cloud Security, you will play a critical role in protecting cloud infrastructure, containerized workloads, and infrastructure-as-code environments within a healthcare technology setting. You will lead initiatives to strengthen cloud security posture, implement Zero Trust access strategies, and safeguard sensitive data across complex environments. Working primarily with Microsoft Azure, Kubernetes, and modern security platforms, you will identify vulnerabilities, mitigate risks, and continuously improve security controls. You will also contribute to incident response, identity and access management, and broader enterprise security operations. Collaborating closely with IT, SRE, and development teams, you will embed security practices throughout infrastructure and software delivery processes. This remote opportunity is ideal for a hands-on security professional who enjoys taking ownership, solving complex challenges, and working in a collaborative, regulated environment.

The ideal candidate is a hands-on cloud security professional with extensive experience protecting modern cloud environments, containerized applications, and enterprise infrastructure. You should bring the following qualifications and technical capabilities:

• Bachelor's degree in Information Security, Computer Science, or a related field preferred; equivalent professional experience will also be considered.

• At least 5 years of experience in cloud security engineering or a closely related role.

• Extensive hands-on experience securing cloud infrastructure and cloud-based applications, preferably in Microsoft Azure; AWS experience is an advantage.

• Strong network security expertise, including network architecture, connectivity, segmentation, and firewall management.

• Practical experience securing containerized workloads and Kubernetes environments, particularly AKS, including network policies, workload identities, and runtime protection.

• Experience with Cloud Security Posture Management (CSPM) tools and remediation of cloud misconfigurations.

• Experience securing infrastructure-as-code platforms and deployment pipelines, particularly Terraform or OpenTofu.

• Strong knowledge of Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time privileged access.

• Experience implementing Zero Trust and Secure Access Service Edge (SASE) solutions, such as Cloudflare Zero Trust, WAF, and Gateway, or equivalent technologies.

• Familiarity with security frameworks such as NIST, ISO 27001, and CIS, as well as compliance frameworks including HITRUST and PCI DSS.

• Proven ability to perform security assessments, manage vulnerabilities, investigate threats, and support incident response activities.

• Strong understanding of Windows and Linux operating systems and endpoint security practices.

• Relevant professional certifications such as CISSP, SSCP, Security+, or Azure/AWS cloud security certifications are preferred.

• Strong analytical and problem-solving skills, with the ability to take ownership of security initiatives and drive them through completion.

• Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.

• Adaptability, curiosity, and a commitment to continuous learning and staying current with emerging security technologies and threats.

Additional qualifications considered an advantage include:

• Familiarity with GitOps tools such as Argo and Flux for secure Kubernetes deployments.

• Previous experience in Network Engineering or Systems Engineering.

• Knowledge of programming and scripting languages.

• Experience working in healthcare technology or other regulated environments.