AWS Cloud Security Engineer- Remote
Role Overview
The AWS Cloud Security Engineer role at Boston Medical Center Health System (BMCHS) is responsible for the development, management, and ongoing support of our public cloud information security strategy.
This role will collaborate closely with infrastructure, application, and other internal and partner teams to achieve organizational goals in the public cloud, while promoting and maintaining strong adherence to and enforcement of security policies and best practices.
The AWS Cloud Security Engineer II will provide value and be a primary source of knowledge in building secure, compliant, and cost-effective AWS solutions.
Team members in this role will administer, maintain, and ensure that AWS and 3rd party security technologies are highly available, actionable, and can support the critical needs of the business.
Strong communication skills and the ability to build/maintain/grow new relationships will ensure you can execute effectively in this role.
Key Skills for This Role
Full Job Posting
JOB REQUIREMENTS
- EDUCATION:
- Bachelor’s degree in Computer Science, Engineering, or related discipline; equivalent experience acceptable.
- CERTIFICATES, LICENSES, REGISTRATIONS REQUIRED:
- CCSP, CISSP, CEH, Security+, or other security related certifications preferred
- 3+ years of experience managing information security in a public cloud environment (AWS, Azure, GCP). Strong, demonstrated AWS expertise required
- 4+ years of experiences in information security
- 7+ years of experience in IT (information technology), preferentially with development, network, or systems administration experience
- Expert-level knowledge of AWS GuardDuty, Security Hub, Macie, Inspector, Trusted Advisor
- Knowledge of Edge protection technologies such as AWS Shield, WAF, CloudFront
- Strong working understanding of Identity and Access Management (IAM) and SSO Integration via Active Directory (Azure AD / ADFS)
- Experience working in organizations with top level Control Tower or Landing Zone Accelerator (SCP’s, Guardrails, Config Rules, etc.)
- Experience with monitoring systems such as CloudWatch / VPC Flow Logs and other industry standard visibility platforms (Splunk, DataDog, Dynatrace, New Relic, etc.)
- Experience with Logging and log monitoring (CloudWatch and CloudTrail) both for security and compliance efforts
- Proficiency with one or more scripting languages (python, json, yaml, bash, etc.)
- Proficiency with Infrastructure as Code (IaC), including CloudFormation and/or Terraform
- Understanding of CI/CD on AWS platform
- Expert knowledge of AWS network and security features (VPC, Security Groups, NACLs, ALB/NLB, Transit Gateway, etc.)
- Experience supporting applications with native services and serverless architecture (Lambda) on AWS platform
- Strong understanding of high availability solutioning (multi-AZ / regions, Backup) and how security fits into this model
- Demonstrated history of moving mission-critical applications from the datacenter to AWS
- Ability to effectively adapt to rapidly changing technology and apply it to business needs
- $89,500.00- $130,000.00
- This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
- NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
- Equal Opportunity Employer/Disabled/Veterans
- According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
EXPERIENCE:
- Healthcare domain knowledge and working in regulated environments is a plus (HIPAA, HITRUST, SOC2, PCI-DSS)
- AWS Certifications, Architect Associate or Professional required. Security or Advanced Networking level specialty certs are a plus
KNOWLEDGE AND SKILLS:
- Expert-level knowledge of AWS GuardDuty, Security Hub, Macie, Inspector, Trusted Advisor
- Knowledge of Edge protection technologies such as AWS Shield, WAF, CloudFront
- Strong working understanding of Identity and Access Management (IAM) and SSO Integration via Active Directory (Azure AD / ADFS)
- Experience working in organizations with top level Control Tower or Landing Zone Accelerator (SCP’s, Guardrails, Config Rules, etc.)
- Experience with monitoring systems such as CloudWatch / VPC Flow Logs and other industry standard visibility platforms (Splunk, DataDog, Dynatrace, New Relic, etc.)
- Experience with Logging and log monitoring (CloudWatch and CloudTrail) both for security and compliance efforts
- Proficiency with one or more scripting languages (python, json, yaml, bash, etc.)
- Proficiency with Infrastructure as Code (IaC), including CloudFormation and/or Terraform
- Understanding of CI/CD on AWS platform
- Expert knowledge of AWS network and security features (VPC, Security Groups, NACLs, ALB/NLB, Transit Gateway, etc.)
- Experience supporting applications with native services and serverless architecture (Lambda) on AWS platform
- Strong understanding of high availability solutioning (multi-AZ / regions, Backup) and how security fits into this model
- Demonstrated history of moving mission-critical applications from the datacenter to AWS
- Ability to effectively adapt to rapidly changing technology and apply it to business needs
- Compensation Range:
- $89,500.00- $130,000.00
- This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
- NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
- Equal Opportunity Employer/Disabled/Veterans
- According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Preferred Qualifications
- CCSP, CISSP, CEH, Security+, or other security related certifications preferred
- Healthcare domain knowledge and working in regulated environments is a plus (HIPAA, HITRUST, SOC2, PCI-DSS)
- AWS Certifications, Architect Associate or Professional required. Security or Advanced Networking level specialty certs are a plus
About Boston Medical Center
Academic medical center providing comprehensive healthcare and medical education.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Boston Medical Center
Registered Nurse- Cardiac Telemetry 2A (32 Hours, Days, 7a-7:30p and 7a-3:30p))
Brockton, USA
Registered Nurse- MedSurg 4A (24 Hours, Nights, 11p-7a)
Brockton, USA
Registered Nurse- MedSurg 4A (24 Hours, Nights, 11p-7:30a)
Brockton, USA
System Division Director of Maternal-Fetal Medicine
Brighton, USA
Registered Nurse- Cardiac Telemetry 2A (32 Hours, Days, 7a-7:30p and 7a-3:30p))
Brockton, USA
Registered Nurse- MedSurg 4A (24 Hours, Nights, 11p-7a)
Brockton, USA
Registered Nurse- MedSurg 4A (24 Hours, Nights, 11p-7:30a)
Brockton, USA
System Division Director of Maternal-Fetal Medicine
Brighton, USA
Data Integrity Specialist - HIM- Full Time Remote
, USA
Research Assistant II, Pediatrics (CHEER)
, USA
Student Nursing Assistant
Brockton, USA
Patient Access Supervisor
Brockton, USA