Cloud Security Specialist

About This Position

This role is a core contributor to the design and implementation of secure cloud architectures across our multi‑cloud environments (GCP primary; AWS/Azure supporting) and cloud‑adjacent SaaS services. As a staff‑level architect, you will focus on applying established security patterns, implementing guardrails, and partnering with engineering teams to ensure cloud workloads meet regulatory, audit, and customer assurance requirements typical of a healthcare payments organization (e.g., PCI DSS, HIPAA/HITECH, HITRUST, SOC 2, SOX, and aligned NIST controls).

• Cloud security design & implementation – Contribute to and maintain cloud security reference architectures, standards, and implementation patterns for IaaS, PaaS, containers/Kubernetes, and serverless workloads.
• Landing zone & governance support – Help implement and operate secure cloud landing zone controls including account/project structures, network segmentation, IAM boundaries, logging, and policy guardrails; support infrastructure‑as‑code and policy‑as‑code implementations aligned with defined standards.
• Identity & access management – Implement least‑privilege IAM for workforce and workload identities; support MFA, conditional access, secrets management, and privileged access patterns designed by senior architects.
• Data protection – Apply encryption, key management, tokenization, and data handling standards for sensitive data including payment and healthcare data; assist with data classification, retention, and secure deletion controls in cloud platforms.
• Security‑by‑design in engineering – Participate in threat modeling and security design reviews for cloud services and applications; help integrate Dev Sec Ops  and SDLC security controls into CI/CD pipelines using established tooling and patterns.
• Detection & response readiness – Ensure required cloud audit logs, telemetry, and security signals are enabled and flowing to centralized monitoring; partner with Security Operations to improve visibility, detection coverage, and incident readiness in cloud environments.
• Vulnerability & configuration management – Help define and maintain cloud hardening baselines, container/image standards, and configuration compliance controls; work with engineering teams to remediate recurring or systemic cloud security findings.
• Third‑party & SaaS security – Support reviews of cloud‑connected vendors and SaaS integrations against established security requirements; assist in defining and validating compensating controls and monitoring expectations.
• Audit & evidence support – Partner with GRC and audit teams to map technical cloud controls to compliance frameworks; support evidence collection, control validation, and remediation activities during audits and assessments.
• Conduct Security Reviews – Work with project teams to evaluate the security of new, cloud‑based initiatives, projects, and products for customer facing and internal use applications.
• Compliance, risk, and assurance expectations – Design cloud security controls aligned to PCI DSS, HIPAA/HITECH, HITRUST CSF, SOC 2, SOX ITGC, and internal security standards; support continuous compliance efforts such as automated configuration checks, continuous monitoring, and repeatable evidence generation; participate in risk assessments, exception handling, and corrective action plans for cloud security gaps; contribute to customer assurance activities by providing clear technical explanations and diagrams with guidance from senior architects.

• 3+ years of hands‑on experience securing workloads in public cloud environments (Google Cloud Platform, AWS, or Azure). Multi‑cloud experience preferred.
• Solid understanding of core cloud security concepts: IAM, networking, segmentation, logging/monitoring, encryption, key management, secrets management, and workload security.
• Experience using infrastructure‑as‑code and automation tools (e.g., Terraform, Cloud Formation, Bicep) and supporting CI/CD pipelines.
• Familiarity with container and/or Kubernetes security fundamentals.
• Experience participating in threat modeling or security design reviews.
• Strong written and verbal…