Staff Cloud Engineer, Security

The role

You will design, build and automate cloud security controls, mainly in AWS with some GCP. You will work with platform, DevOps, engineering and product teams to protect product infrastructure and help prevent unauthorized PHI exfiltration.

What you will do

• Design and automate cloud security controls for IAM, authorization, Just-in-Time access, data access and platform access.
• Improve AWS and GCP security posture through Terraform guardrails, risk roadmaps, legacy remediation and secure infrastructure patterns.
• Build security tooling in Python, Go and Lambda for vulnerability management, alerting, PHI logging and cloud security workflows.
• Secure containers, workloads and CI/CD pipelines with controls teams can run in production.
• Partner with infrastructure, DevOps, engineering and product teams on sensitive-data handling, incident response and secure platform initiatives.
• Document controls, standards, automation and playbooks that help teams adopt secure workflows.

Required qualifications

• 5+ years of hands-on cloud security experience
• Deep AWS expertise and familiarity with GCP
• Strong technical depth across cloud infrastructure, identity, authorization, networking, containers, CI/CD, logging, monitoring and security operations
• Experience building security automation and infrastructure tooling in Python, Go, Terraform and cloud-native services
• Experience designing and operating access controls, including RBAC, ABAC, policy-as-code, granular engineering access and Just-in-Time access
• Familiarity applying cloud security frameworks, HIPAA requirements and related standards to production environments
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field

Benefits

• Remote-first culture
• 401(k) savings plan through Fidelity
• Medical, vision and dental coverage with multiple plan options, including disability insurance
• Paid Time Off and Discretionary Time Off
• 12 weeks of 100% paid parental leave
• Fertility coverage, $25,000 for surrogacy/adoption, and paid leave for failed treatments, adoption or pregnancies
• Work-from-home reimbursement

Before you apply

• Open to candidates at both the Senior and Staff levels.
• Your recruiter will share your geographic zone on request.

About the company

Included Health is a healthcare company offering integrated virtual care and navigation, including primary, behavioral, specialty and urgent care. It is an Equal Opportunity Employer.