AWS Cloud Security Engineer- Remote

Position Summary

The AWS Cloud Security Engineer role at Boston Medical Center Health System (BMCHS) is responsible for the development, management, and ongoing support of our public cloud information security strategy. The engineer collaborates closely with infrastructure, application, and partner teams to achieve organizational goals in the public cloud, promoting strong adherence to and enforcement of security policies and best practices. This senior role provides expertise in building secure, compliant, and cost‑effective AWS solutions, and administers, maintains, and ensures AWS and 3rd‑party security technologies are highly available and actionable to support the critical needs of the business.

Position: AWS Cloud Security Engineer

Department: Information Technology

Schedule: Full Time

• Design, manage, support, and implement cloud security policies, services, and projects.
• Provide architectural security guidance in compliance with industry standards (HIPAA, NIST, CIS) for public cloud environments.
• Review and provide security‑significant feedback on designs and proposed changes submitted by others within the organization.
• Communicate and present technical data to audiences with varying levels of technical knowledge.
• Communicate with and present to upper management.
• Manage cloud firewall, DLP, and vulnerability scanning technology.
• Support Level 1 in resolving cloud‑security related issues and improve documented Incident Response playbooks.
• Research new technology and assist in proof‑of‑concept testing.
• Document security standards and processes.
• Work with internal BMC Security and infrastructure teams to remediate vulnerabilities and other security issues.
• Contribute to design decisions for new technology or existing technology being used in a new way.
• Coordinate remediation of known vulnerabilities within the organization’s cloud presence.
• Assist in the education of the workforce on security topics through training and awareness opportunities.
• Provide feedback and guidance to less experienced security engineers on projects and skills development.

Bachelor’s degree in Computer Science, Engineering, or related discipline; equivalent experience acceptable.

Bachelor’s degree in Computer Science, Engineering, or related discipline; equivalent experience acceptable.

• CCSP, CISSP, CEH, Security+, or other security related certifications preferred.

• 3+ years of experience managing information security in a public cloud environment (AWS, Azure, GCP). Strong, demonstrated AWS expertise required.
• 4+ years of experience in information security.
• 7+ years of experience in IT (information technology), preferentially with development, network, or systems administration experience.
• Healthcare domain knowledge and working in regulated environments is a plus (HIPAA, HITRUST, SOC2, PCI‑DSS).
• AWS Certifications, Architect Associate or Professional required. Security or Advanced Networking level specialty certs are a plus.

• Expert-level knowledge of AWS Guard Duty, Security Hub, Macie, Inspector, Trusted Advisor.
• Knowledge of Edge protection technologies such as AWS Shield, WAF, Cloud Front.
• Strong working understanding of Identity and Access Management (IAM) and SSO Integration via Active Directory (Azure AD / ADFS).
• Experience with top‑level Control Tower or Landing Zone Accelerator (SCP’s, Guardrails, Config Rules, etc.).
• Experience with monitoring systems such as Cloud Watch / VPC Flow Logs and visibility platforms (Splunk, Data Dog, Dynatrace, New Relic).
• Experience with Logging and log monitoring (Cloud Watch and Cloud Trail) for security and compliance efforts.
• Proficiency with one or more scripting languages (Python, JSON, YAML, Bash).
• Proficiency with Infrastructure as Code (IaC), including Cloud Formation and/or Terraform.
• Understanding of CI/CD on AWS platform.
• Expert knowledge of AWS network and security features (VPC, Security Groups, NACLs, ALB/NLB, Transit Gateway).
• Experience supporting applications with native services and serverless architecture (Lambda) on AWS platform.
• Strong…