Cloud Security and Infrastructure Engineer

Key Responsibilities

• Design and enforce least-privilege IAM architectures, network segmentation, and cloud security controls (SCPs, secrets management, encryption, runtime threat detection) across multiple AWS accounts.
• Build automated detection and response pipelines, using AI tools to turn security findings into fast, actionable remediation.
• Maintain GitHub-based CI/CD pipelines and automation frameworks alongside the engineering team.
• Lead cross-functional security initiatives, embedding threat modeling and security reviews into the architecture and development lifecycle.
• Own vulnerability management, AWS security posture monitoring, incident detection and response, and HIPAA compliance programs.
• Shape cloud architecture decisions — balancing security, cost, and reliability — around zero-trust and defense-in-depth principles.
• Review and document the workflows, staffing, and tooling for each active care program, and produce a written summary of gaps and immediate priorities.

What You’ll Achieve in Your First 90 Days

Requirements

• 5+ years of hands-on AWS cloud security and infrastructure engineering (IAM, network security, threat detection, compliance) in production — ideally including building a security program from scratch.
• Deep fluency with AWS security services (GuardDuty, Security Hub, Config, CloudTrail, KMS, Inspector) and IAM policy design.
• Experience with multi-account AWS governance (Control Tower, Organizations, VPC/network design) and container/serverless infrastructure (ECS, EKS, Lambda).
• Familiarity with security frameworks and compliance standards (CIS, HIPAA, HITRUST, AWS Well-Architected).
• US Citizenship is required.

Chamber Values

Location

• Remote opportunity with the ability to work ET or CT hours. You must be authorized to work in the US without sponsorship. Periodic travel to practice sites or Chamber offices may be required.