Senior Cyber Security Engineer

About the role

SCAN is a nonprofit health organization serving more than 500,000 people across Arizona, California, Nevada, New Mexico, Texas, and Washington, with over $8 billion in annual revenue. We are building the future of care for older adults, grounded in purpose, accountability, and respect for the people and communities we serve.

Responsibilities

• Design, deploy, and secure cloud infrastructure with detail to regulatory compliance (HIPAA, HITRUST), high availability, and data security for patient-centric solutions.
• Design, implement, and test security solutions and controls for applications and integrations.
• Design and implement scalable, secure, and resilient security solutions for Azure cloud infrastructure tailored to healthcare applications and sensitive patient data.
• Secure Azure resources including Virtual Machines, App Services, Azure SQL, Entra ID, Azure Storage Accounts, Azure Container Registry, Azure Kubernetes, Azure Data Factory, Private Endpoints, Linux/Unix VMs, and Virtual Networks.
• Develop and manage Infrastructure as Code (IaC) using tools such as ARM templates, Bicep, or Terraform within Azure DevOps CI/CD pipelines.
• Automate cloud security and deployments using Azure DevOps, GitHub, or PowerShell.
• Monitor system performance and availability using Azure Monitor, Log Analytics, and other monitoring tools.
• Apply Vulnerability and Application Security using Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Work collaboratively with cross-functional teams to support DevOps practices and CI/CD pipelines and implement best practices.
• Provide escalation support for development and infrastructure teams as well as other groups within IT.
• Ensure accurate and timely completion of all assigned work.

Requirements

• 6+ years of experience in cloud/app security, with at least 3 years focused on Microsoft Azure.
• Proven experience with Azure DevOps for CI/CD pipelines and Infrastructure as Code (IaC) implementation.
• Strong knowledge of coding best practices and alignment with OWASP.
• Strong understanding of IAM, RBAC, and Managed Identities and experience with creating and provisioning least privileged roles in alignment with Zero Trust.
• Familiarity with Azure security and networking components, such as Azure Firewall, Network Security Groups (NSGs), and Virtual Networks (VNets).
• Working knowledge of Vulnerability and Application Security using SAST and DAST.
• Extensive hands-on experience securing and supporting Microsoft technologies including Azure Resources, Defender for Cloud, Azure DevOps, Azure Advanced Security, M365, O365, Power platform/Dynamics, SharePoint Online, Intune, and Windows 365 Cloud PC/DaaS.
• Supports Microsoft and Linux technologies including design, architecture, and implementation of Active Directory/EntraID, Intune, IIS, and 32-bit and 64-bit architecture.
• Skills in API usage for integration and CLI and SDKs for application troubleshooting.
• Project and task management including planning, prioritizing, organizing, gathering facts, exercising sound judgment in problem solving, decision making, and facilitating solutions.
• Maintains data integrity in the organization’s systems while keeping strict confidentiality of the information within.
• Adapts to frequently changing priorities and deadlines.
• Detail oriented with ability to follow through to completion and maintain concentration to complete tasks and assignments.
• Maintains professional and technical knowledge by attending educational workshops, reviewing professional publications, establishing personal networks, and participating in professional societies.

Qualifications

• Bachelor’s degree in computer science or equivalent experience (minimum 10 years).
• Active Azure and/or AWS cloud Engineer certification required.
• Relevant certifications such as Microsoft Certified: Cybersecurity Architect Expert, CISSP, CSSP.
• Knowledge of securing hybrid cloud architectures integrating Azure with on-premises infrastructure.
• Experience with Change/Release Management.
• Experience with HIPAA compliance and HITRUST certification.
• Technical knowledge of configuring Identity Management and Roles.
• 5+ years of experience with Application Security.
• Experience with application monitoring of Windows systems and services.
• Dev experience and hands-on experience with coding languages such as Python.
• Ability to provide exceptional technical documentation.
• Demonstrate problem solving skills and troubleshooting techniques.
• Ability to multi-task and handle a variety of work assignments.

Conditions Of Work

• Office Hours: Monday–Friday, 8:00 AM to 5:00 PM.
• Extended work hours, as needed.
• On-call responsibility.
• May require travel to SCAN remote offices.
• May require after-hours and weekend work for security incidents, as approved.

Benefits

• Base salary range: $106,200 to $182,983 annually.
• An annual employee bonus program.
• Robust Wellness Program.
• Generous paid-time-off (PTO).
• 11 paid holidays per year, 1 floating holiday, birthday off, and 2 volunteer days.
• Excellent 401(k) Retirement Saving Plan with employer match.
• Robust employee recognition program.
• Tuition reimbursement.