Security Engineer III

Description

ABOUT ASPIRION

At Aspirion, our mission is simple and meaningful: to help healthcare providers get paid accurately, quickly, and transparently for the care they deliver. By combining deep human expertise with advanced technology and AI, we are helping make healthcare more affordable and accessible for everyone.

For more than two decades, Aspirion has been a market leader in revenue cycle services, specializing in some of the most complex and high-impact areas of reimbursement. From challenging denials and zero-balance reviews to aged accounts receivable, motor vehicle accident claims, workers' compensation, Veterans Affairs, and out-of-state Medicaid, we take on the work that others cannot solve and deliver real results for our clients.

At the heart of that success is our team. Our teammates are the foundation of everything we do. With more than 1,400 individuals across the organization, we are united by a shared commitment to delivering exceptional outcomes and creating meaningful impact for the hospitals and health systems we serve.

We are building a results-driven environment where high performance, collaboration, and continuous growth are expected and supported. The people who thrive here bring a growth mindset, stay open to new technology, and collaborate across teams to solve problems. You will have the opportunity to work alongside a talented and driven team, engage with innovative technology, and play a direct role in solving complex challenges that matter.

Joining Aspirion means more than taking a job. It means being part of a team that is shaping the future of healthcare operations while making a measurable difference for providers and patients alike.

The Security Engineer III reports to the Principal Security Engineer and serves as a senior, hands-on individual contributor supporting security controls across Aspirion's Microsoft Azure, Microsoft 365, identity, data, application, endpoint, and security-platform environments.

Working closely with the Principal Security Engineer, this role helps implement and operate the security strategy for Azure security posture, identity security, Microsoft Purview and data-protection controls, vulnerability and asset-management capabilities, and security automation. The engineer also partners with Security Operations, Infrastructure, Network, Application Development, Data, Privacy, Compliance, and business teams to turn security and regulatory requirements into practical, measurable controls.

Success in this role requires sound judgment, collaborative execution, and the ability to improve security without creating unnecessary friction. In coordination with the Principal Security Engineer, the engineer will take assigned work from assessment and design through implementation, documentation, and steady-state operation.

• Design and maintain Azure security guardrails and configuration baselines across subscriptions, management groups, workloads, and platform services. Core areas include logging, encryption, secrets management, workload protection, network exposure, and configuration compliance.
• Operate and improve Microsoft Defender for Cloud, Azure Policy, Azure Monitor, and related security capabilities. Prioritize findings, coordinate remediation, validate fixes, and maintain documented risk exceptions.
• Implement and improve Microsoft Entra , including Conditional Access, Privileged Identity Management, role-based access control, access reviews, identity governance, managed identities, service principals, workload identities, and least-privilege access patterns.
• Partner with IT Operations, Endpoints, Servers, and Dev Ops teams, along with application owners, to strengthen joiner, mover, and leaver processes; privileged-access governance; periodic access certification; and monitoring of human and non-human identities.
• Configure, test, deploy, and tune Microsoft Purview capabilities, including data discovery and classification, sensitivity labels, automatic labeling, data-loss-prevention policies, retention and lifecycle controls, and monitoring of sensitive-data use and movement.
• Work with Data, Privacy, Legal, Compliance, and business owners to translate approved data-handling requirements into enforceable controls across Microsoft 365, Azure, endpoints, applications, and relevant SaaS platforms.

• Administer and improve vulnerability-management capabilities across cloud resources, endpoints, servers, network devices, applications, dependencies, containers, and infrastructure as code. Establish risk-based priorities, remediation targets, validation processes, reporting, and exception workflows.
• Improve the completeness and accuracy of security asset inventories by reconciling cloud, endpoint, network, application, and vulnerability-management sources. Identify unmanaged, unscanned, stale, duplicate, or unsupported assets and coordinate…