Cybersecurity Engineer II Cloud and Identity

Qualifications

• Education, Training and Certification
• Bachelor's degree or higher in Cybersecurity, Information Technology, or a related field is preferred; equivalent professional experience will be considered in lieu of a degree for the right candidate.
• Cloud certifications are highly desirable, particularly the AWS Certified Security – Specialty or AWS Certified Solutions Architect, and Microsoft certifications such as AZ-500 (Azure Security Engineer) or SC-300 (Identity and Access Administrator).
• Broad security certifications such as CompTIA Security+, GIAC GCLD (Cloud Security Essentials) or GCSA, or (ISC)2 CCSP are also valued; progress toward or interest in a senior-level certification such as CISSP is viewed favorably.
• Knowledge and Experience
• 3+ years of experience in cybersecurity, cloud engineering, identity and access management, or information technology with meaningful security responsibilities, in a large organization, preferably a large healthcare environment.
• Hands-on experience securing AWS environments, including a working understanding of IAM (roles, policies, trust relationships, permission boundaries), organizational structure and guardrails, VPC and network controls, S3 and data storage security, encryption and key management, and native services such as CloudTrail, GuardDuty, Security Hub, and Config.
• Working experience with Microsoft Azure and Microsoft 365 security, including Defender for Cloud, subscription and resource-level controls, and cloud workload protection.
• Some exposure to Google Cloud Platform is beneficial; deep GCP expertise is not expected, but general familiarity with a third cloud platform is a plus.
• Practical experience with a cloud security posture management or CNAPP platform such as Wiz, Prisma Cloud, Orca, or Microsoft Defender for Cloud, including interpreting findings, tuning policies, and using the platform to drive remediation.
• Solid working knowledge of Microsoft Entra ID and hybrid identity, including conditional access, multifactor authentication, Entra Connect and directory synchronization, application registrations and enterprise applications, SSO protocols (SAML, OAuth 2.0, OpenID Connect), and Privileged Identity Management.
• Understanding of core identity and access management concepts, including least privilege, role-based access control, separation of duties, joiner-mover-leaver processes, access reviews, and privileged access management.
• Familiarity with common cloud and identity attack techniques—such as credential and token theft, consent phishing, privilege escalation through misconfigured roles, and abuse of public or misconfigured cloud resources—and the controls that mitigate them.
• General familiarity with infrastructure-as-code (Terraform, CloudFormation), containers and Kubernetes, and CI/CD pipelines, sufficient to interpret security findings in these areas; hands-on development or pipeline ownership is not required.
• Well-rounded knowledge of cybersecurity domains beyond cloud and identity, including vulnerability management, data protection, application security, network security, and endpoint and email security, with the ability to contribute meaningfully outside the primary focus areas.
• Working knowledge of HIPAA and its requirements for protecting electronic protected health information (ePHI) in a hospital or healthcare environment, or the ability to develop that knowledge quickly.
• Hands-on experience contributing to cybersecurity incident response, including alert triage, investigation, containment, and remediation as part of a team.
• Scripting or automation experience with PowerShell, Python, or the AWS CLI, and comfort working with APIs to extract data and reduce manual effort, is a plus.
• Willingness and availability to participate in a rotating on-call schedule.
• Skills and Abilities
• Strong analytical and problem-solving skills, with the judgment to know when to dig deeper and when to escalate.
• Excellent communication and teamwork abilities.
• Ability to learn and adapt to new technologies quickly, which is essential given the pace of change in cloud and identity platforms.
• Ability to explain cloud and identity risk to application owners, infrastructure teams, and leadership in terms each audience can act on.
• Comfort contributing outside of the primary focus areas and shifting between workstreams as organizational risk and team needs change.
• Attention to detail and a proactive approach to security, particularly in environments that change continuously.
• Ability to support cybersecurity projects within a healthcare organization, balancing security objectives with clinical, operational, and regulatory priorities.
• Sound judgment in balancing security controls against the availability and usability requirements of clinical and business systems.