Senior Cloud Security Engineer

Senior Cloud Security Engineer
Remote
Direct Hire
Salary – 120-150k

Our client is a growing healthcare technology company that provides digital solutions designed to modernize and streamline administrative processes across the healthcare industry. The organization is in a major transformation phase, modernizing legacy systems, building new products, and automating traditionally manual workflows. The environment handles sensitive healthcare data and operates under regulatory and security frameworks including HIPAA, HITRUST, and SOC 2.

Job Description
We are looking for a Senior Cloud Security Engineer to design, implement, and maintain security controls across a highly regulated AWS cloud environment. This person will take a hands-on role in securing applications, infrastructure, and workloads containing Protected Health Information (PHI), while establishing cloud security guardrails, automation, detection capabilities, and secure-by-default infrastructure standards. The Senior Cloud Security Engineer will partner closely with application development, cloud operations, GRC, managed security providers, and other engineering teams while also serving as a technical leader and escalation point within Security Operations.
Required Skills

• 5–7+ years of experience in cybersecurity, infrastructure engineering, DevOps, or related areas
• 3+ years of hands-on AWS security engineering experience in compliance-driven environments
• Deep experience with AWS services including VPC, IAM, EC2, S3, RDS, Lambda, and EKS
• Experience designing secure multi-account AWS environments using AWS Organizations, organizational units, guardrails, IAM policies, and Service Control Policies
• Strong experience protecting sensitive data and PHI using encryption, AWS KMS, least-privilege access controls, and secure cloud architecture
• Production-level experience with Terraform and/or AWS CloudFormation
• Experience implementing policy-as-code using tools such as OPA, Checkov, or Rego
• Experience embedding security controls, vulnerability scanning, container scanning, and secrets management into CI/CD pipelines
• Strong understanding of HIPAA, HITRUST CSF, SOC 2, or similar compliance frameworks
• Experience with cloud security incident response, investigation, containment, and root cause analysis
• Hands-on experience with AWS CloudTrail, CloudWatch, SIEM platforms, and cloud detection engineering
• Experience with SAST, DAST, CSPM, vulnerability management, and remediation
• Strong Linux security and hardening experience, including access controls, logging, patching, and benchmark-based configuration
• Scripting and automation experience using Python/Boto3, PowerShell, or similar technologies

• AWS Certified Security – Specialty
• CISSP or CCSP certification
• HITRUST Certified CSF Practitioner (CCSFP)
• Experience with Windows, Microsoft 365, Entra ID, and Active Directory security
• Experience securing physical or hybrid infrastructure and networks
• Healthcare technology experience
• Familiarity with DICOM, PACS, HL7, or FHIR
• Experience integrating and securing environments following mergers, acquisitions, or platform integrations

Welcome to ConsultNet, a premier national provider of technology talent and solutions. Our expertise spans across project services, contract-to-hire, direct search, and managed services onshore, nearshore, and hybrid. For over 25 years, we have connected thousands of consultants with meaningful roles through a personal, communication-driven approach, partnering with a diverse client base to build high-performing teams and create lasting impact. Our comprehensive service offerings cover a wide range of technology and engineering positions across key markets nationwide. Learn more at www.consultnet.com .

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.