GuideWell Source
GuideWell Source
GuideWell Source is part of the GuideWell Family and works across healthcare delivery, healthcare insurance, and consulting. The company develops and brings healthcare solutions to market, including care models designed to improve patient outcomes and strengthen consumer engagement. Its services also include administrative and claims processing support for state and federal Medicare and Medicaid programs, helping health organizations manage complex operations with a focus on reliability and operational excellence.

Cloud Security Engineer - Hybrid, United States

GuideWell Source is seeking a Cloud Security Engineer to strengthen AWS and Azure security controls during healthcare cloud migration. The role covers identity, encryption, logging, PHI protection, infrastructure automation, and compliance evidence across regulated environments.

Description

  • Develop and operate security controls across GuideWell Source's commercial, GovCloud, and secondary cloud environments
  • Implement preventive safeguards such as SCPs, IAM policies, permission boundaries, encryption, and secrets management
  • Configure and maintain detective controls while driving identified issues through remediation
  • Create PHI protection measures, including controls for test data in lower environments
  • Automate evidence gathering and contribute to audits and security assessments
  • Evaluate application and vendor architectures and handle cloud security escalations
  • Develop the cloud logging pipeline that supplies the security operations center
  • Deploy security controls using Terraform and CI/CD workflows
  • Prepare evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal audits
  • Oversee encryption and KMS key architecture across cloud accounts

Requirements

  • At least six years of relevant information security experience, including four or more years in cloud security engineering
  • A related bachelor's degree is required
  • Strong AWS and Azure IAM expertise, including federation and cross-account access
  • Practical experience with Terraform
  • Production experience using cloud-native security services
  • Background working under HIPAA, HITRUST, SOC 2, FedRAMP, or NIST 800-53 controls
  • Must obtain the Certified Information Systems Security Professional (CISSP) license within 180 days of hire
  • Healthcare payer experience is preferred
  • AWS or Azure Security Specialty, CCSP, or GIAC cloud security certification is preferred
  • Experience with GovCloud and FedRAMP Moderate or High is preferred
  • Security engineering experience across at least two major cloud platforms is preferred
  • SIEM integration and detection engineering experience is preferred
  • Experience with privileged access management tools is preferred

Benefits

  • Medical, dental, vision, life, and global travel health insurance
  • Life insurance plus short- and long-term disability programs
  • Leave programs designed to support personal circumstances
  • Retirement Savings Plan with an employer match
  • Paid time off
  • Volunteer time off
  • Ten company holidays and two well-being days
  • Additional voluntary benefit options
  • Comprehensive wellness program
  • Potential incentive or commission compensation opportunities
  • Annual performance reviews with consideration for base-pay increases
  • Hybrid work arrangement

Related Jobs