Cloud Security Engineer

Gifthealth

. Develop and maintain security standards and reference architectures for cloud environments .

Posted 9/18/2026full-timeRemote • Ohio • United StatesMid-LevelSenior💰 $115,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security standards, architecture evaluation, and vulnerability management across hybrid environments, particularly with AWS and external platforms. Proficient in automating security processes and implementing least-privilege access models while collaborating with cross-functional teams.

Highest-signal resume keywords

Cloud Security Standards DevelopmentAWS Security ExperienceInfrastructure AutomationVulnerability ManagementCloud Architecture Evaluation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityInfrastructure EngineeringDevOpsIAMNetworkingEncryptionSecrets ManagementLogging and MonitoringVulnerability ManagementCloud-Native Security Services

Soft Skills

Effective CommunicationCollaborationProblem-Solving

Tools & Technologies

AWSHerokuSnowflakeKubernetesTerraformCloudFormationCSPMCNAPPAPIsVPN

Certifications & Qualifications

AWS CertificationCloud Security CertificationKubernetes Certification

Industry Keywords

CIS Cloud BenchmarksNIST GuidanceRegulated EnvironmentsHybrid CloudLeast Privilege Access

Tech Stack

Tools & technologies

AWSBigQueryCloudHerokuKubernetesTerraform

About the role

Key responsibilities & impact

Develop and maintain security standards and reference architectures for cloud environments
Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes
Evaluate proposed architectures for security risks and recommend appropriate controls
Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services
Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake
Identify insecure cloud configurations and excessive permissions
Assess cloud environments against security standards and benchmarks
Prioritize and coordinate remediation of cloud security findings
Establish least-privilege access models and controls for administrative and privileged cloud access
Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management
Implement cloud security guardrails with engineering teams
Ensure cloud logging and security telemetry support monitoring
Develop or assist with detections for suspicious cloud activity
Partner with Security Operations to investigate cloud security events
Embed security requirements into Infrastructure-as-Code
Develop automated checks, preventative controls, reusable secure modules, and templates
Automate security processes using APIs, scripts, and cloud-native services
Support vulnerability management across cloud infrastructure and workloads
Coordinate vulnerability remediation with infrastructure and engineering teams
Develop cloud security standards and technical requirements
Map cloud controls to security and compliance requirements
Provide technical evidence for audits and assessments
Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications
Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams
Report to the Director of Security

Requirements

What you’ll need

3+ years of experience in cloud engineering, cloud security, infrastructure engineering, DevOps, security engineering, or a related field
Hands-on experience securing environments within at least one major public cloud platform
Strong understanding of cloud IAM, networking, encryption, secrets management, logging and monitoring, compute and storage security, vulnerability management, and cloud-native security services
Ability to secure workloads across a hybrid environment spanning AWS and externally managed platforms such as Heroku and Snowflake
Experience scripting or automating infrastructure and security activities
Understanding of least privilege and cloud-native identity models
Ability to evaluate cloud architectures and communicate security requirements clearly to technical teams
Must be able to work at a computer for extended periods
Must be able to communicate effectively, verbally and in writing
Must be able to handle and access sensitive cloud infrastructure and security data in compliance with organizational requirements
Must be able to respond to critical cloud security incidents outside standard working hours when required
Relevant AWS, cloud security, Kubernetes, or security certifications are a plus, but not required
Preferred: strong AWS security experience, including multi-account cloud environments
Preferred: experience with Kubernetes, containers, or serverless technologies
Preferred: experience with CSPM or CNAPP platforms and familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks
Preferred: familiarity with Site-to-Site and client VPN architectures
Preferred: experience with column-level masking, row-level security, or PHI field-level governance in Snowflake or BigQuery
Preferred: experience with Terraform or CloudFormation and preventative cloud guardrails
Preferred: experience working within regulated environments

Benefits

Comp & perks

Full-time employment
Standard business hours
Flexibility for cloud security incident response or urgent remediation of high-risk findings
Equal Opportunity Employer committed to an inclusive environment