Cloud Security Engineer

About the role

We are a mission-driven organization dedicated to championing the health and well-being of our members and the communities we serve. The Cloud Security Engineer is a hands-on technologist responsible for implementing, operating, and improving cloud security capabilities across the enterprise. You will partner closely with engineering, architecture, and risk teams to deliver scalable security capabilities that work in real-world environments. You will also help enable the secure adoption of AI technologies by implementing guardrails, supporting AI-enabled platforms, and helping ensure AI-driven capabilities align with security and compliance requirements.

The ideal candidate will live within driving distance of the Omaha, Nebraska office. This position allows remote flexibility but will have 1 day per week in the office. If living in one of our approved states (Florida, Iowa, Kansas, Minnesota, Missouri, Nebraska, North Dakota, and Texas), this person may travel to our headquarters based on business needs.

Responsibilities

• Implement and maintain secure Azure configurations, guardrails, and reference architectures across identity, network, compute, and data
• Implement policy-as-code and secure-by-default deployment patterns using Azure Policy and infrastructure-as-code
• Support the operation and continued improvement of Cloud Security Posture Management (CSPM), including risk prioritization, remediation, and baseline alignment
• Implement, tune, operate, and improve cloud security tooling and core security platforms, including Microsoft Defender, WAF, Microsoft Sentinel, Entra ID, CyberArk, CrowdStrike, and related capabilities
• Implement and maintain security guardrails for AI usage and the secure adoption of AI platforms
• Identify, assess, and help mitigate cloud and AI security risks, including misconfigurations, access risks, and emerging threats
• Partner with platform and application security teams to integrate security into CI/CD pipelines and support secure AI-assisted development practices
• Develop automation to improve remediation, monitoring, and compliance reporting at scale
• Partner with engineering teams to translate security requirements into practical, implemented solutions
• Troubleshoot cloud security issues, document solutions, and collaborate with senior engineers on complex problems

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience)
• 3+ years of experience in cloud security, cybersecurity engineering, cloud engineering, or related fields
• Hands-on experience supporting or securing Azure environments, including identity, network, and platform services
• Experience implementing or operating cloud security controls and tooling
• Working knowledge of cloud security risks and misconfiguration patterns, including identity and access risks
• Experience with or working knowledge of Infrastructure as Code (Terraform, Bicep, ARM) and policy-as-code
• Ability to assess risk, prioritize remediation activities, and drive assigned issues to resolution
• Ability to work independently with general guidance, take ownership of assigned responsibilities, and deliver reliable outcomes
• Experience collaborating with engineering teams to implement practical, scalable security solutions
• Strong communication skills with the ability to work effectively with engineers, architects, risk partners, and leadership

Skills

• Experience supporting AI/ML or AI-enabled platforms or implementing guardrails for enterprise AI usage
• Familiarity with AI-related threats (e.g., prompt injection, data leakage, model misuse)
• Scripting or automation experience (PowerShell, Python, or similar)
• Familiarity with compliance frameworks (NIST, CIS, HIPAA)
• Experience in healthcare or other regulated industries