Engineer, Cloud Security

PRIMARY FUNCTION

Under the direction of the CISO, this role is responsible for driving security of cloud resources including Microsoft365, Microsoft Azure and any other technology-as-a-service across Pediatric Associates, Alpine Physician Partners and Tapestri HealthTech. The role is an individual contributor but must have the power to lead, influence and execute leveraging vendor partners, collaborating with stakeholders, and performing work themselves.

ESSENTIAL DUTIES AND RESPONSIBILITIES

This list may not include all of the duties that may be assigned.

1. Develop and lead implementation of security standards and practices that effectively and efficiently reduce risk for the organization's cloud resources, and partner with the cloud engineering team to implement, operate and monitor those standards and practices.
2. Develop and lead implementation of standards and practices that embed security ("DevSecOps") into the workflow and operation of the organization's custom-developed applications, and partner with the software development and DevOps resources to implement, operate and monitor those standards and practices.
3. Assess and leverage third-party resources and solutions to maximize and streamline the implementation and operation of cloud security processes and procedures.
4. Act as a subject matter expert (SME) for security tools, applications and processes, including Microsoft365 security and compliance solutions (e.g., CASB) and Microsoft Azure security features.
5. Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations.
6. Contribute to the development, testing and maintenance of the organization's incident response plan and procedures.
7. Investigate potential threats across the organization and respond to incidents per the prescribed procedures.

QUALIFICATIONS

EDUCATION: Minimum High School Diploma/GED or equivalent required. Bachelor's degree in information security, information systems or similar field preferred.

REQUIRED EXPERIENCE

• 5 or more years working in information security engineering and architecture.
• 2 or more years securing Microsoft365 and/or Microsoft Azure platforms.

PREFERRED EXPERIENCE

• 2 or more years working in the healthcare industry in an information security capacity.

LICENSURE / CERTIFICATION

• CISSP or similar preferred.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

KNOWLEDGE, SKILLS AND ABILITIES

• Be a technical leader who can think strategically, has extensive technical knowledge, and can leverage technology, automation and managed services to scale delivery of capabilities.
• Understands and continuously learns modern cloud security architecture and solution strategies across people, process and technology.
• Technical understanding of and experience with Microsoft365 and its security and compliance features, and Microsoft Azure and its security features.
• Incident response plan development, implementation and operation.
• Stay current with the latest security trends, threats, and regulatory changes to ensure we stay ahead of the curve.
• Assessing and developing information security policies, procedures, standards and guidelines.
• Ability to effectively leverage vendor resources and professional services to deliver results.
• Excellent verbal and written communication skills; collaboration and interpersonal skills.
• Highly organized, detail-oriented, excellent time management skills, and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment.
• Independent judgement and decision-making abilities.

TYPICAL WORKING CONDITIONS

• Non-patient facing.
• Full-time remote/telework; must be contiguous U.S.-based.
• Indoor office work.
• Operating computer.
• Lift/carry 10 lbs.
• Push/pull 10 lbs.
• May require sitting while operating computers
• Manual dexterity.
• Travel may be required, less than 10%.