Cloud Security Engineer

Florida Blue (Blue Cross and Blue Shield of Florida) • United States,

4d • $109,300 - $177,600 • Hybrid

About The Position

The Cloud Security Engineer builds and operates the security controls embedded in GuideWell's cloud platforms as the company migrates infrastructure across commercial, GovCloud, and secondary cloud platforms. This role delivers preventive controls such as service control policies, IAM roles, and permission boundaries, and owns privileged access, key encryption architecture, secrets management, and the tuning of cloud security configuration services. The engineer builds the cloud logging pipeline feeding the security operations center, implements PHI data protection, and produces control evidence for HITRUST, HIPAA, SOC 2, and FedRAMP. This is a hands-on engineering role on the cloud platform team, working closely with the security organization that sets control standards.

Requirements

• 6+ years related work experience in relevant information security, with 4+ years in cloud security engineering
• Related Bachelor's degree required
• Strong AWS/Azure IAM skills, including cross-account access and federation.
• Hands-on Terraform.
• Experience with cloud native security services in production.
• Experience in an environment governed by HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53.

Nice To Haves

• Healthcare payer experience.
• AWS/Azure Security Specialty, CCSP, or GIAC cloud security certification.
• GovCloud and FedRAMP Moderate or High.
• Security engineering across two or more major cloud platforms.
• SIEM integration and detection engineering.
• Privileged access management tooling.

Responsibilities

• Implement and maintain preventive controls: SCPs, IAM policy, permission boundaries, encryption, secrets
• Configure, tune, and operate detective controls; drive findings to remediation
• Build data protection controls for PHI, including lower-environment test data handling
• Automate evidence collection and support audit and assessment cycles
• Review application and vendor designs; respond to cloud security escalations
• Build the cloud logging pipeline that feeds the security operations center.
• Deliver controls through Terraform and CI/CD.
• Produce control evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audit.
• Manage encryption and KMS key architecture across accounts.

Benefits

• Medical, dental, vision, life and global travel health insurance
• Income protection benefits: life insurance, short- and long-term disability programs
• Leave programs to support personal circumstances
• Retirement Savings Plan including employer match
• Paid time off, volunteer time off, 10 holidays and 2 well-being days
• Additional voluntary benefits available; and a comprehensive wellness program
• Competitive pay
• Opportunities for incentive or commission compensation
• Regular annual reviews with pay for performance considerations for base pay increases

What This Job Offers

• Job Type: Full-time
• Career Level: Senior