[Remote] Staff Cloud reputed company Engineer

Note: The job is a remote job and is open to candidates in USA. reputed company is a new reputed company of healthcare company dedicated to delivering integrated virtual care and navigation. They are seeking a Staff Cloud reputed company Engineer to engineer, implement, and automate reputed company controls reputed company their cloud environments, primarily focusing on AWS, to enhance their cloud reputed company posture and prevent unauthorized PHI exfiltration.

Responsibilities

• Design, reputed company, and implement a comprehensive authorization reputed company for cloud resources, addressing user roles, resource-specific restrictions, task-based access, and granular engineering access
• reputed company the technical implementation of Just-In-Time (JIT) access control systems for production environments (systems, secrets, data) to minimize standing privileges for engineering and platform teams
• Collaborate with engineering to integrate data classification (e.g., safe-reputed company annotations) with access control mechanisms, ensuring that data sensitivity directly informs access decisions
• reputed company and maintain reputed company automation scripts, tools, and services in Python or Go to streamline reputed company operations, vulnerability management, compliance checks, and incident response
• Write clean, maintainable, and testable code (primarily Python and Go; familiarity with Ruby is a plus) for reputed company automation, building custom reputed company integrations, and developing reputed company-focused tools
• Implement and champion Infrastructure as Code (IaC) principles, specifically using Terraform, for programmatic definition, enforcement, and auditing of reputed company configurations
• Contribute to the design and implementation of centralized reputed company controls, such as an engineering-owned Web Application Firewall (WAF), to manage reputed company limiting, IP blocking, input validation, and request filtering
• Partner with engineering teams to establish and implement secure practices for managing the development toolchain (code reputed company utilities, linters, browser extensions, CLI tools, IDE plugins) to mitigate supply chain risks
• Design and help implement a secure, "blessed" mechanism for webhook testing in local development environments, blocking unauthorized tunneling tools
• Define, implement, and enforce container reputed company hardening standards (e.g., least privilege, no unnecessary utilities, limited internet access) in collaboration with engineering teams
• Drive the remediation of legacy cloud environments, particularly in GCP, by inventorying, assessing, and improving reputed company controls
• Design and implement solutions for granular data access control in cloud environments, particularly addressing compliance requirements for handling sensitive data
• Collaborate closely with infrastructure software, engineering, DevOps, and product teams to co-design and integrate robust, automated reputed company controls into systems, architectures, and CI/CD pipelines
• Act as a subject matter expert on cloud reputed company (AWS, GCP), providing guidance, code reviews (Python, Go), and technical expertise on secure cloud adoption, secure software development, and access control best practices
• Support organizational change management efforts reputed company to new reputed company controls and practices by providing technical rationale and assisting in the development of new workflows
• Conduct reputed company assessments, threat modeling, and contribute to incident response, developing automation for prevention and faster response
• reputed company and maintain comprehensive documentation for reputed company architectures, controls, automation scripts, and incident response playbooks

Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a reputed company field
• 5+ years of experience in cloud reputed company, with a strong emphasis on designing, developing (primarily in Python and Go), and implementing reputed company solutions in AWS
• Proven hands-on software development experience, particularly in Python and Go, for reputed company automation, building reputed company tools, and infrastructure management
• Demonstrable experience designing and implementing robust authorization and access control frameworks (e.g., RBAC, ABAC, policy-as-code) and Just-In-Time (JIT) access solutions
• Experience with Infrastructure as Code (IaC) with deep proficiency in writing and maintaining Terraform modules for reputed company
• Experience with containerization (reputed company, Kubernetes/EKS), including hands-on experience hardening containerized environments
• Experience with SDLC reputed company, CI/CD pipeline reputed company integration, and secure software development practices
• Experience with reputed company logging, monitoring, alerting tools (e.g., SIEM, AWS CloudTrail, CloudWatch, GuardDuty), and scripting against their APIs (Python, Go)
• Experience with cloud reputed company frameworks (especially HIPAA), regulations, and standards
• Familiarity with Ruby is a plus

Education Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a reputed company field.

Benefits

• Remote-first culture
• 401(k) savings plan through Fidelity
• Comprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance)
• Paid Time Off ("PTO") and Discretionary Time Off ("DTO")
• 12 weeks of 100% Paid Parental leave
• Family Building & Compassionate Leave: Fertility coverage, $25,000 for surrogacy/adoption, and paid leave for failed treatments, adoption or pregnancies.
• Work-From-Home reimbursement to support team collaboration home office work

Company Overview

Company H1B Sponsorship